
NUCLEAR WEAPONS MATERIALS 
GONE MISSING: 

What Does History Teach? 


Henry D. Sokolski 
Editor 


The United States Army War College 


The United States Army War College educates and develops leaders for service 
at the strategic level while advancing knowledge in the global application 
of Landpower. 

The purpose of the United States Army War College is to produce graduates 
who are skilled critical thinkers and complex problem solvers. Concurrently, 
it is our duty to the US. Army to also act as a "think factory" for commanders 
and civilian leaders at the strategic level worldwide and routinely engage 
in discourse and debate concerning the role of ground forces in achieving 
national security objectives. 




The Strategic Studies Institute publishes national 
security and strategic research and analysis to influence 
policy debate and bridge the gap between military 
and academia. 


CSLD 

U.S. ARMY WAR COLLEGE 

UlUJ 

U.S. Army War College 

_SLDR_^ 


y School of 
Strategic 
Landpower 



The Center for Strategic Leadership and Development 
contributes to the education of world class senior 
leaders, develops expert knowledge, and provides 
solutions to strategic Army issues affecting the national 
security community. 

The Peacekeeping and Stability Operations Institute 
provides subject matter expertise, technical review, 
and writing expertise to agencies that develop stability 
operations concepts and doctrines. 

The Senior Leader Development and Resiliency program 
supports the United States Army War College's lines of 
effort to educate strategic leaders and provide well-being 
education and support by developing self-awareness 
through leader feedback and leader resiliency. 

The School of Strategic Landpower develops strategic 
leaders by providing a strong foundation of wisdom 
grounded in mastery of the profession of arms, and 
by serving as a crucible for educating future leaders in 
the analysis, evaluation, and refinement of professional 
expertise in war, strategy, operations, national security, 
resource management, and responsible command. 

The U.S. Army Heritage and Education Center acquires, 
conserves, and exhibits historical materials for use 
to support the U.S. Army, educate an international 
audience, and honor Soldiers— past and present. 


STRATEGIC 

STUDIES 

INSTITUTE 



The Strategic Studies Institute (SSI) is part of the U.S. Army War 
College and is the strategic-level study agent for issues related 
to national security and military strategy with emphasis on 
geostrategic analysis. 

The mission of SSI is to use independent analysis to conduct 
strategic studies that develop policy recommendations on: 

• Strategy, planning, and policy for joint and combined 
employment of military forces; 

• Regional strategic appraisals; 

• The nature of land warfare; 

• Matters affecting the Army's future; 

• The concepts, philosophy, and theory of strategy; and, 

• Other issues of importance to the leadership of the Army. 

Studies produced by civilian and military analysts concern 
topics having strategic implications for the Army, the Department of 
Defense, and the larger national security community. 

In addition to its studies, SSI publishes special reports on topics 
of special or immediate interest. These include edited proceedings 
of conferences and topically oriented roundtables, expanded trip 
reports, and quick-reaction responses to senior Army leaders. 

The Institute provides a valuable analytical capability within the 
Army to address strategic and other issues in support of Army 
participation in national security policy formulation. 




Strategic Studies Institute 
and 

U.S. Army War College Press 


NUCLEAR WEAPONS MATERIALS 
GONE MISSING: 

What Does History Teach? 


Henry D. Sokolski 
Editor 

November 2014 


The views expressed in this report are those of the authors and 
do not necessarily reflect the official policy or position of the 
Department of the Army, the Department of Defense, or the U.S. 
Government. Authors of Strategic Studies Institute (SSI) and 
U.S. Army War College (USAWC) Press publications enjoy full 
academic freedom, provided they do not disclose classified 
information, jeopardize operations security, or misrepresent 
official U.S. policy. Such academic freedom empowers them to 
offer new and sometimes controversial perspectives in the inter- 
est of furthering debate on key issues. This report is cleared for 
public release; distribution is unlimited. 


This publication is subject to Title 17, United States Code, 
Sections 101 and 105. It is in the public domain and may not be 
copyrighted. 


Comments pertaining to this report are invited and should 
be forwarded to: Director, Strategic Studies Institute and U.S. 
Army War College Press, U.S. Army War College, 47 Ashbum 
Drive, Carlisle, PA 17013-5010. 


All Strategic Studies Institute (SSI) and U.S. Army War 
College (USAWC) Press publications may be downloaded free 
of charge from the SSI website. Hard copies of this report may 
also be obtained free of charge while supplies last by placing 
an order on the SSI website. SSI publications may be quoted 
or reprinted in part or in full with permission and appropriate 
credit given to the U.S. Army Strategic Studies Institute and U.S. 
Army War College Press, U.S. Army War College, Carlisle, PA. 
Contact SSI by visiting our website at the following address: 
www.StrategicStudieslnstitute.army.mil. 


The Sbategic Studies Institute and U.S. Army War 
College Press publishes a monthly email newsletter to update 
the national security community on the research of our analysts, 
recent and forthcoming publications, and upcoming confer- 
ences sponsored by the Institute. Each newsletter also provides 
a strategic commentary by one of our research analysts. If you 
are interested in receiving this newsletter, please subscribe on the 
SSI website at www.StrategicStudieslnstitute.army.mil/newsletter. 


This volume is the 18th in a series of edited volumes of con- 
tracted research the Nonproliferation Policy Education Center 
(NPEC) has published in cooperation with the Strategic Studies 
Institute of the U.S. Army War College. The volume features re- 
search done over the last 2 years. Funding for this project came 
from the U.S. Department of Defense, the Carnegie Corporation 
of New York, and other charitable foundations. Much of the work 
to prepare the book for publication was undertaken by NPEC's 
research associate, Kate Harrison, and the staff of the Strategic 


iv 


Studies Institute, especially Dr. James Pierce and Ms. Rita Rum- 
mel. This book would not have been possible without their help. 
Finally, heartfelt thanks are due to the project's authors and re- 
viewers, who contributed their time and ideas. 


ISBN 1-58487-652-2 



CONTENTS 


Foreword ix 

1. Introduction: Materials Unaccounted For: 

Nuclear Weapons Materials Gone Missing 1 

Henry D. Sokolski 

Part I: 

2. U.S. Military Nuclear Material Unaccounted 
For: Missing in Action or Just 

Sloppy Practices? 7 

Charles D. Ferguson 

3. A Brief Commentary on "U.S. Military 
Nuclear Material Unaccounted For: Missing 

in Action or Just Sloppy Practices?" 41 

Thomas B. Cochran and Matthew G. McKinzie 

Part II: 

4. Sometimes Major Violations of Nuclear 

Security Get Ignored 49 

Victor Gilinsky 

5. The Nonproliferation Regime 

and Its Discontents 75 

Leonard Weiss 

Part III: 

6. Can the IAEA Safeguard Fuel-Cycle 

Facilities? The Historical Record 89 

Alan J. Kuperman, David Sokolow, 
and Edwin S. Lyman 


7. Review of "Can the IAEA Safeguard 
Fuel-Cycle Facilities? The Historical 

Record" 125 

Ryan A. Snyder 

Part IV: 

8. Dismantling the South African Nuclear 
Weapons Program: Lessons Learned 

and Questions Unresolved 137 

Jodi Lieberman 

9. Verifying the Dismantlement of South 

Africa's Nuclear Weapons Program 163 

Olli Heinonen 

About the Contributors 185 


viii 


FOREWORD 


In 2009, the President of the United States spot- 
lighted nuclear terrorism as one of the top threats to 
international security and launched an international 
effort to identify, secure, and dispose of global stocks 
of weapons-usable nuclear materials— namely highly 
enriched uranium and weapons-grade plutonium. 
Since that time, three nuclear security summits have 
been held, along with scores of studies and workshops 
(official and unofficial), drawing sustained high-level 
attention to the threat posed by these materials. How- 
ever, little attention has been given to incidences where 
sensitive nuclear materials actually went missing. 

This volume seeks to correct this deficiency, exam- 
ining incidences of material unaccounted for (MUF) 
arising from U.S. and South African nuclear weapons 
programs, plutonium gone missing from Japanese 
and British civilian production facilities, and a theft 
of highly enriched uranium from a U.S. military con- 
tractor in the 1960s that was used to help fuel Israel's 
nuclear weapons program. This volume also ques- 
tions the likelihood that the International Atomic 
Energy Agency would be able to detect diversions of 
fissile materials, whether large or small, and the likeli- 
hood that a state could or would do anything were 
diversion detected. 

What emerges from this book is a downbeat as- 
sessment of how likely we are to be able to account 
for past MUF quantities or to be able to prevent 
future ones. 



Director 

Strategic Studies Institute and 
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CHAPTER 1 


INTRODUCTION 

MATERIALS UNACCOUNTED FOR: 
NUCLEAR WEAPONS MATERIALS 
GONE MISSING 

Henry D, Sokolski 

Ever since President Barack Obama made securing 
nuclear weapons assets a top priority for his global 
arms control agenda, guarding and disposing of these 
holdings have become an international priority. Every 
2 years, high-profile nuclear summits on how to pre- 
vent nuclear theft and sabotage have been held — the 
first in Washington, DC; the second in Seoul, South 
Korea; and the third in The Hague, the Netherlands. 
With each summit, more and more states have agreed 
to dispose of what weapons-grade nuclear fuels they 
have. In between these meetings, scores of studies 
have been commissioned and nearly as many work- 
shops (official and unofficial) have been held. Yet, in 
all of this, almost no attention has been focused on 
what to do about the nuclear weapons-usable pluto- 
nium and highly enriched uranium that we have lost 
track of. This is odd. 

Although the exact quantities of materials unac- 
counted for (MUF) are unknown, there is no doubt 
they are significant. U.S. nuclear weapons MUF alone 
is pegged at nearly six tons — i.e., enough to fashion 
at least 800 low-tech, multi-kiloton bombs. Russian 
MUF figures are assumed easily to be as large. As for 
Chinese, Indian, Pakistani, Israeli, and North Korean 
MUF figures, though, we have only a general idea of 
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what they might be. The civilian production of nucle- 
ar weapons-usable plutonium in the United States, 
United Kingdom (UK), Japan, France, and India also 
is a worry. We know that specific accounting losses in 
the case of civilian plutonium reprocessing and fuel 
making in the UK and Japan have been significant— 
measured in scores of bombs worth. What they might 
be elsewhere, again, is unknown. 

As for the possibility of military diversions, we 
now know that some of what was categorized as MUF 
has been spirited away to make bombs. In specific, at 
least 100 kilograms (kg) (and possibly much more) 
of U.S. weapons-grade uranium was stolen from a 
defense contractor in the 1960s to help fuel Israel's 
nuclear weapons program. Fortunately, the two larg- 
est fissile material producers, the United States and 
Russia, stopped making nuclear weapons-usable plu- 
tonium and uranium. Also, a small portion of the U.S. 
and Russian surpluses of these materials have been 
disposed of. 

This helps at least cap the growth in MUF uncer- 
tainties. Also, so far, besides the Israeli case, there are 
no known cases of large nuclear thefts. Presumably, 
they would have become known by now. Finally, 
there is some solace in knowing that U.S. nuclear ma- 
terial accounting practices are now improved over 
those used during the Cold War. 

Unfortunately, none of this helps answer precisely 
how much MUF has been produced or the extent to 
which we can prevent the generation of more MUF. 
Without these answers, reducing or capping existing 
nuclear weapons arsenals and blocking future nuclear 
proliferation must remain iffy propositions. 

How likely is it that the International Atomic En- 
ergy Agency (IAEA) could detect a large amount of 
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MUF in a timely fashion even at declared civilian 
nuclear sites? What of its ability to detect smaller, in- 
cremental diversions? What of national means of de- 
tection? What can we learn from the history of civilian 
MUF discoveries in Japan and the UK and of military 
MUF in the United States and South Africa? How well 
can the IAEA or any existing nuclear material accoun- 
tancy system track the production of special nuclear 
material or account for past production? What do the 
answers to these questions suggest with regard to the 
prospects of eliminating nuclear weapons and nuclear 
weapons material stockpiles? 

As this volume makes clear, the answers are mixed 
at best. In the case of U.S. MUF, the discoveries of tons 
of material missing came well after the United States 
originally lost track of the material. Most of it has yet 
to be accounted for. The South African case remains 
a debate between analysts that trust what South Af- 
rican officials have claimed and those that still worry 
about persisting accounting discrepancies. In the few 
known IAEA MUF cases, there still are material bal- 
ances outstanding that are quite large. More impor- 
tant, the IAEA privately admits that its ability to track 
production of nuclear fuels and to find covert nuclear 
enrichment and reprocessing plants is limited. None 
of this augurs well for the future. As for accounting 
for past production, there are clear limits. 

A much larger question, of course, concerns en- 
forcement: What, if anything, has been done when 
nuclear security understandings have been violated 
or there have been discoveries of significant amounts 
of MUF? In important cases, has the United States or 
other major states chosen to act or avert their gaze? 
Again, what history we have offers answers that are 
hardly encouraging. Too often and more often than 
not, the United States and its allies have averted 
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their gaze from intelligence that lends credence to 
military diversions. 

This volume focuses on all of these issues. Much of 
the analysis is technical. Most of it, technical or not, is 
downbeat. The good news is that this is the first dedi- 
cated volume on this specialized topic. What questions 
we cannot answer now may have answers with further 
analysis. The key message of this volume, however, is 
one of limits. We may never know where considerable 
amounts of nuclear weapons-usable material "went." 
More important, the amount of MUF will only grow 
unless we do more to limit continued, unnecessary ci- 
vilian and military material production. Whether or 
not that recommended limit will be recognized and 
honored remains to be seen. 
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CHAPTER 2 


U.S. MILITARY NUCLEAR MATERIAL 
UNACCOUNTED FOR: 

MISSING IN ACTION OR JUST SLOPPY 
PRACTICES? 

Charles D. Ferguson 

The standard story is that there is not much to worry 
about: The United States has the gold standard when 
it comes to accounting for fissile material, especially in 
the military sector. Although the U.S. Department of 
Energy (DOE) has acknowledged that almost six met- 
ric tons (MT) of fissile material, including plutonium, 
highly enriched uranium, and uranium-233 — enough 
for at least several hundred nuclear explosives — is 
unaccounted for, this discrepancy mostly occurred 
during the rush to produce fissile material during the 
first few decades of the Cold War when the emphasis 
was on fast production rather than accurate account- 
ing. The explanation for the large amount of material 
unaccounted for (MUF) is that material was sent to 
scrap, mixed in with other waste, stuck in piping, and 
otherwise characterized as "normal operating losses." 
As the Comptroller General of the United States stated 
in a 1978 report: 

For the most part, MUF is attributed by DOE and NRC 
[Nuclear Regulatory Commission] to such things as 
inaccurate measurements and difficult to measure ma- 
terial held up in pipes, filters and machines used in 
processing special nuclear material.^ 

The other main reason given was "clerical errors."^ 
One could infer from that assessment that most, if 
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not close to all, DOE and NRC officials appeared to 
believe that no material was diverted. 

Nonetheless, one should worry about the ac- 
counting system and the potential for diversion. In 
particular, one significant case of alleged insider di- 
version of highly enriched uranium— that could fuel 
several nuclear bombs— has been reported and rais- 
es concern about conventional wisdom. While one 
could discount this alleged incident as an anomaly 
because it took place in the 1960s before the current, 
more rigorous accounting system was established, 
many government reports from inspectors general of 
the DOE and the General Accountability Office have 
sounded an alarm for more than 30 years that the ac- 
counting system is not adequate. As discussed in this 
volume, the United States is still not meeting its most 
stringent standards. 

If the U.S. nuclear material accounting system is 
not adequate, then what does that imply about nu- 
clear-armed states that are still manufacturing and 
remanufacturing warheads more frequently than the 
United States? According to conventional thinking, 
if the United States is not producing fissile material 
and not manufacturing or remanufacturing nearly 
as many warheads as during the Cold War, then its 
accuracy in accounting for fissile material should go 
up. Indeed, this has been the trend. But for a nuclear- 
armed state still producing fissile material for military 
purposes such as India and Pakistan or a nuclear- 
armed state such as Russia, which continually reman- 
ufactures its warheads much more frequently than the 
United States, there may be greater gaps between the 
material known to be in the inventory and material 
unaccounted for. 
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U.S. FISSILE MATERIAL PRODUCTION 
FOR MILITARY PURPOSES AND 
INVENTORY DIFFERENCES 

The United States was the first nation to make 
nuclear weapons and subsequently amassed one of 
the largest stockpiles of weapons and fissile material, 
only to be surpassed by the Soviet Union's produc- 
tion. For 2 decades from the early-1940s to the mid- 
1960s, the United States ramped up its fissile material 
production in response to both external geopolitical 
and internal political pressures and produced several 
hundred MT of fissile material. 

By the early 1960s, the United States had dozens of 
facilities, numerous buildings at these sites, and thou- 
sands of workers involved in the production and han- 
dling of fissile material. Production facilities included 
plutonium production reactors at Hanford, WA; and 
the Savannah River Site, SC; and uranium enrichment 
plants at Oak Ridge, TN; Paducah, KY; and Piketon, 
OH. Handling and storage facilities were more spread 
across the country and included facilities located at 
Los Alamos, NM; Livermore, CA; Amarillo, TX; Rocky 
Flats, CO; Erwin, TN; and Apollo, PA, to name a few 
notable sites. As a result of these widespread and nu- 
merous activities, the challenge of controlling and ac- 
counting for military nuclear materials kept growing. 

By the end of 1963, the United States had a surplus 
of fissile material. This prompted Congress in 1964 to 
pass the Private Ownership of Special Nuclear Materi- 
als Act, which allowed the Atomic Energy Commis- 
sion (AEC) "to sell, lease, or grant nuclear materials 
to industry for research and development activities."^ 
Such activity could increase the difficulties in account- 
ing for fissile material, especially as the number of 
commercial firms handling the material increased. 


Also, in 1964, President Lyndon Johnson in his 
State of the Union message declared a reduction in 
the production of highly enriched uranium and plu- 
tonium. Consequently, Oak Ridge stopped highly 
enriched uranium (HEU) production, and Hanford 
and Savannah River Site shut down four nuclear pro- 
duction reactors. By the early-1970s, the United States 
had only four reactors in operation; the N-reactor at 
Hanford and three at Savannah River. In 1989, the last 
of the reactors at Savannah River Site was finally shut 
down due to safety concerns. The uranium gaseous 
diffusion plants at Paducah and Portsmouth contin- 
ued to operate beyond 1989, but they were no longer 
used for HEU production purposes after 1991; the pro- 
duction for weapons had ended in 1964. Instead, they 
were subsequently used only for production of low 
enriched uranium for commercial purposes. Thus, by 
1991, the United States had stopped producing any 
fissile material for military purposes but was still us- 
ing and handling HEU and plutonium in weapons 
and naval fuel. 

During the decades of fissile material production, 
the amounts of materials generated were shrouded in 
secrecy. Because these materials were used in nuclear 
weapons, the Naval Nuclear Propulsion Program, the 
Army Nuclear Power Program, and other defense- 
related research and development activities, revealing 
the exact amounts produced to the public could have 
jeopardized national security. At least this was the 
rationale throughout the Cold War. 

In 1993, several years after the Cold War ended. 
President Bill Clinton and his administration's DOE 
unveiled the "Openness Initiative" to make govern- 
ment more open and accountable to the public. As a 
result, DOE began to declassify vast amounts of infor- 
mation, as long as it could be assured that such declas- 
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sification would not harm national security. A major 
aspect of this initiative was to reveal publicly the total 
quantities of highly enriched uranium and plutonium 
produced. A few years after this initiative began, DOE 
published two unprecedented reports on the HEU 
and plutonium inventories. 

Regarding HEU, DOE reported that as of Septem- 
ber 30, 1996, the total inventory was 740.7-MT ura- 
nium (MTU) containing 620.3 MTU-235. Importantly, 
the DOE report did not state the amount of HEU in 
waste as part of the inventory and that material was 
thus not included in the overall quantity. (DOE with- 
held the HEU report for several years.) According to 
DOE, "Most of the HEU in waste has been removed 
from the U.S. inventory as 'normal operating losses' 
because it is technically too difficult or uneconomical 
to recover."^ Table 2-1 shows the locations and inven- 
tories of HEU as of September 30, 1996. 

Note that in Table 2-1, the vast majority of HEU is 
listed under "Y-12 Plant, Pantex, & DoD" and is aggre- 
gated among those sites and DOD facilities for nation- 
al security purposes. That particular listing does not 
specify the amounts for the two different HEU assays 
of less than and greater than 90 percent U-235, the di- 
viding line for weapons-grade material, but HEU less 
than 90 percent U-235 is still weapons-usable; once 
again, this was done by DOE for national security rea- 
sons. Also, note the relatively large amount of material 
listed under "Miscellaneous." Despite the lack of de- 
tails for these two categories, the DOE report on HEU 
was truly path breaking. This report also described 
the inventory difference, or material unaccounted 
for, of HEU from 1945 through September 1996 as 
3.2 MTU-235. Half of this inventory difference is from 
DOE sites, and the other half is from commercial sites. 
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Location 

20 to <90% U-235 

90% U-235 

Total 

MTU 

MTU-235 

MTU 

MTU-235 

MTU 

MTU-235 

Y-12 Plant, Pantex & 
DoD (Department of 
Defense) 





651.6 

557.4 

Idaho National Lab 

23.1 

15.3 

4.3 

4.0 

27.4 

19.3 

Savannah River Site 

21.6 

14.1 

0.5 

0.5 

22.2 

14.6 

Portsmouth Gaseous 
Diffusion Piant 

13.9 

6.6 

7.8 

7.5 

21.7 

14.1 

Rocky Fiats 
Environmental 
Technology Site 



6.0 

5.8 

6.0 

5.6 

Los Alamos National 
Lab 

0.4 

0.2 

3.2 

3.0 

3.5 

3.2 

Oak Ridge National Lab 

1.6 

1.3 



1.6 

1.3 

K-25 Site 

1.4 

0.7 

0.1 

0.1 

1.5 

0.8 

Sandia National Lab 

0.2 

0.1 

0.5 

0.5 

0.7 

0.6 

Hanford Site 

0.5 

0.2 



0.5 

0.2 

Brookhaven National 
Lab 

0.3 

0.2 



0.3 

0.2 

Miscellaneous 

1.8 

1.2 

1.9 

1.8 

3.7 

3.0 

Total 





740.7 

620.3 


Table 2-1. U.S. HEU Inventory at Major Locations, 
as of September 30, 1996,® 


Also under the Openness Initiative, in 1996, DOE 
published Plutonium: The First 50 Years in which it de- 
scribed the production, acquisition, and utilization of 
plutonium from the period of the mid-1940s through 
1994. That report identified that: 

• The combined DOE and DOD accountable 1994 
plutonium inventory was 99.5-MT, which in- 
cluded a pooled 66.1-MT for the Pantex Plant 
near Amarillo, TX, and the U.S. nuclear weap- 
ons stockpile; 
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• The U.S. plutonium balance included 2.8-MT of 
inventory differences, equating to 2.5 percent 
of the total plutonium production; 

• A total of 38.2-MT of accountable weapon- 
grade plutonium was declared surplus to de- 
fense needs and would never be used to build 
nuclear weapons; and, 

• The amount of plutonium contained in waste 
was 3.9-MT located at nine different DOE sites.® 

In 2012, DOE published an update to that report to 
factor in changes to data and facilities' decommission- 
ing and opening from the period 1994 through 2009. 

The four most significant changes since 1994 include: 

(a) the completion of cleanup activities at the Rocky 
Flats Plant in 2005; (b) material consolidation and dis- 
position activities, especially shipments from Hanford 
to the Savannah River Site; (c) the 2007 declaration of 
an additional 9.0-MT of weapons-grade plutonium to 
be surplus to defense needs in the coming decades; 
and (d) the opening of the Waste Isolation Pilot Plant 
(WIPP) near Carlsbad, New Mexico in 1999. These in- 
terrelated factors have not only resulted in decreases 
to total inventory and inventory differences but also 
increases in both surplus materials and materials writ- 
ten off the accountable inventory as waste.^ 

The doe's 2012 report shows that as of September 
30, 2009: 

• The plutonium inventory, maintained under 
nuclear material control and accountability, is 
95.4-MT, a 4.1-MT (4 percent) decrease to the 
1994 inventory. The 95.4-MT total includes a 
combined Pantex and nuclear weapons stock- 
pile of 67.7-MT. The most important factor for 
the reduction in inventory was the reclassifica- 
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tion of process residues originally set aside for 
plutonium recovery as waste. Of the 4.1-MT re- 
duction, 3.5-MT (85 percent) came from Rocky 
Flats residues sent to WIPP [Waste Isolation 
Pilot Plant] for disposition; 

The cumulative inventory difference for ac- 
countable plutonium is 2.4-MT, a 0.4-MT (14 
percent) decrease to the 2.8-MT made public 
in the 1996 plutonium report. The 0.4-MT de- 
crease in the cumulative inventory difference is 
attributed to materials recovered during de-in- 
ventorying and closure activities at Rocky Flats 
(0.3-MT) and Hanford (0.1-MT). Of the current 

2.4- MT of inventory difference, 1.1-MT (46 per- 
cent) is at Hanford and 0.9-MT (38 percent) at 
Rocky Flats. A large portion of the remaining 

2.4- MT cumulative inventory difference ap- 
pears to be explained by understated remov- 
als from inventory to waste [emphasis added]; 
Plutonium surplus to defense needs is now 

43.4- MT, a 5.2-MT (14 percent) increase to the 
1994 declaration; and. 

The plutonium estimated in waste is 9.7-MT, a 
5.8-MT (149 percent) increase to the 1994 inven- 
tory of 3.9-MT. The 5.8-MT increase is attribut- 
ed to: 4.4-MT (76 percent) in new discards from 
the accountable inventory; 0.8-MT (330 percent) 
increase in Rocky Flats solid waste generated 
prior to 1970; 0.4-MT (84 percent) increase in 
Hanford high level waste tank estimates; 0.1- 
MT in solid waste at a commercial low-level 
radioactive disposal facility not included in the 
1996 report, and 0.1-MT from other sites.® 
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Obviously, the relatively large changes in total 
inventory, inventory differences, and continuing un- 
certainties in knowing what is or is not accounted for 
raises the possibility of diversions of fissile material in 
the past and perhaps in the future. 

In addition to the stockpiles of HEU and plutoni- 
um produced for defense purposes, the United States 
produced uranium-233, a fissile material, for both its 
military and civilian nuclear programs. Just a few ki- 
lograms (kg) of uranium-233 could be used to make a 
nuclear explosive. In the early-1960s, the United States 
wanted to test using uranium-233 in nuclear explosives 
because this material is more stable than plutonium at 
high temperatures. The stability of plutonium under 
high temperatures turned out to be not that great of 
a concern, and the interest in using uranium-233 for 
weapons purposes stopped by 1966. While the United 
States made far less uranium-233 — about 2-MT with 
about 1.5-MT being separated from spent fuel — than 
HEU or weapon-grade plutonium, a relatively large 
amount of uranium-233 is unaccounted for — about 
123-kg, or 0.123-MT.® On a percentage basis, the por- 
tion of uranium-233 unaccounted for is somewhat 
greater than the inventory differences in the HEU and 
plutonium stockpiles. 

DEFINING MATERIAL UNACCOUNTED FOR 
AND UNDERSTANDING WHEN IT IS A 
CONCERN 

What exactly is meant by "material unaccounted 
for"? Nuclear material that cannot be accounted for 
is officially known as "inventory difference" material. 
(This name change serves the euphemistic purpose 
of not reminding the public that material was "un- 
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accounted for.") No measurement system is perfect; 
there will always be measurement uncertainties. Con- 
sequently, to determine if there is a legitimate concern 
about diversion or theft of nuclear material at a facil- 
ity, one needs to know how the difference in inven- 
tory compares to the limits of errors in measuring the 
inventory. If the former is greater than the latter, then 
there may be cause for concern. To calculate the in- 
ventory difference or MUF, one needs to know how 
much material was known to be present at the begin- 
ning check of the inventory, how much material was 
removed, how much was received, and how much 
was measured at the end check of the inventory. In a 
formula, one can write this as: MUF = (Beginning In- 
ventory + Receipts) - (Removals + Ending Inventory). 

If the two quantities in parentheses balance, the 
MUF equals zero. But because of measurement uncer- 
tainties, the MUF will most likely not equal zero for a 
given inventory calculation. Every measurement will 
have an uncertainty; by statistically combining the in- 
dividual uncertainties, one can determine the limits of 
error of the material unaccounted for (LEMUF). If the 
LEMUF is calculated at a 95 percent confidence level, 
the null hypothesis is that MUF is zero at a 5 percent 
level of significance; if the LEMUF is calculated at a 
99 percent confidence level, the null hypothesis is the 
MUF is zero at a 1 percent level of significance. The 
DOE now strives for the latter level of significance. 
According to Dr. Thomas Cochran: 

The statistical distribution of MUF will have a given 
one-sigma and two-sigma range. A MUF of zero does 
not mean that SNM [special nuclear material] is ac- 
counted for, but can be the sum of a positive MUF 
due to measurement error and a diversion of an equal 
amount of material. The value of the sigma is impor- 
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tant not just in a relative sense to the percentage of 
the overall inventory, but in the absolute sense to the 
quantity of material needed to construct a nuclear 
weapon (i.e., kilograms range). This importance of 
the absolute value of the sigma is what drives require- 
ments for very small sigma and is a challenge for fa- 
cilities handling SNM in bulk or solution form.^° 

If MUF were just due to random variations in the 
measurements, one would expect for a series of inven- 
tory calculations that the MUF values would sum close 
to zero. If instead the MUF values show a tendency 
toward positive values, then one would suspect that 
there could be biased measurements, recording mis- 
takes, unknown or unrecorded inventory, or losses or 
thefts of material. If the MUF values tend to be con- 
sistently negative, one would suspect biased measure- 
ments or recording mistakes.^^ Of course, the biggest 
concern is statistically significant positive MUF values 
bigger than the LEMUF because this could indicate 
diversion, loss, or theft. 

The inventory difference also has to reconcile 
losses of uranium and plutonium through radioactive 
decay and transmutations of an element to a differ- 
ent element in a nuclear reactor or accelerator. Other 
losses or consumptions of nuclear material occur in 
nuclear explosives or reactors via fission. The DOE 
has tried to take into account these natural and man- 
made losses and consumptions in its historical assess- 
ment of uranium and plutonium stockpiles, which are 
discussed later. 

Each site that contains, handles, or transfers nu- 
clear material has to maintain a ledger to account for 
inventories, receipts, and removals. A site that has an 
appreciable amount of material usually is subdivided 
into more manageable areas with smaller amounts 
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of material. These areas are termed Material Balance 
Areas (MBAs). An MBA is a well-defined physical 
area, for example, a storage vault for HEU or pluto- 
nium. Ledgers are used to track the material stored or 
used in an MBA and going into and out of an MBA. 
In effect, a ledger is like a checkbook. Each ledger for 
each MBA for a total site is summed periodically to 
determine whether the inventory balances or has dif- 
ferences. The MBA ledger data are sent to the national 
nuclear database system. 

This explanation, which is the typical description 
one can find at government websites, for example, 
in the United States, United Kingdom (UK), and 
Canada, could not convey the difficulties in making 
accurate measurements, at the first reading. The un- 
certainties are much greater than one could imagine 
if one does not understand the problems in measur- 
ing several tons of nuclear material moving through 
bulk production and processing facilities such as large 
uranium enrichment and reprocessing plants. These 
problems have resulted in substantial uncertainties in 
accounting. 

The United States used the gaseous diffusion 
method to enrich practically all of the uranium for 
military purposes. (During the Manhattan Project, 
there was some use of the electromagnetic separation 
and thermal diffusion methods.) The U.S. gaseous dif- 
fusion plants were immense, with thousands of dif- 
fusion barriers and miles of labyrinthine networks of 
pipes, pumps, and other machinery. For example, the 
Portsmouth Plant being decommissioned in Piketon, 
OH, takes up about 3,700 acres of land and has almost 
200 football fields' worth of floor space in buildings 
for diffusion and other processing of enriched ura- 
nium.^^ During these plants' operations, enriched 
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uranium would easily get stuck in the plants' interi- 
ors. Given the history of U.S. production of enriched 
uranium as discussed earlier, one has to realize that 
tens of thousands of tons of uranium hexafluoride gas 
were pumped through these plants to produce the ap- 
proximately 750-MT of HEU for military purposes. 
It is not surprising, then, that a few metric tons are 
considered MUF. 

But the accounting problem for tracking HEU was 
even worse during the decades of massive produc- 
tion. According to the Government Accountability 
Office (GAO), records were often destroyed due to re- 
cords disposal instructions, or available recorded data 
were insufficient to assess how much material could 
be missing. Concerning the latter issue, the MUF 
for different enrichment levels was not analyzed for 
many major facilities during the heyday of produc- 
tion. Thus, one could not say how much material was 
unaccounted for at the 20 percent enrichment level 
versus the 90 percent level. (The former is just at the 
dividing line for HEU, and the latter is weapons-grade 
material and obviously of grave concern.) According 
to the GAO, DOE tried to reconstruct data by inter- 
viewing contractors who had worked at those sites; 
consequently, DOE had to rely on the memories of 
individual workers. At best, DOE could only deter- 
mine rough estimates of the MUF at those sites. GAO 
assessed in 1978 that: 

it was extremely difficult for DOE management to rou- 
tinely analyze the data from an effective safeguards 
point of view without conducting a detailed review of 
the contractors' inventory records at the facility. The 
agency recognized this need and in April 1977 began 
to require contractors to provide the necessary data 
for such analysis.^^ [Emphasis added.] 
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From the early-1940s to early-1977, DOE officials 
and their predecessors in the Manhattan Project and 
the AEC did not have an effective capability within 
their accounting systems to know if significant quan- 
tities of HEU were being diverted from production 
facilities. 

Plutonium production had a different but equally 
demanding set of problems in permitting accurate 
determination of MUF. To make plutonium, reactors 
convert uranium-238, the very abundant nonfissile 
isotope of natural uranium, to plutonium-239 by hav- 
ing each uranium-238 nucleus absorb a neutron and 
then undergo two radioactive decays. Within a few 
days, a freshly fueled reactor will produce appre- 
ciable amounts of plutonium. (Typically, one gram of 
plutonium is generated for every 1 day of operation 
at one megawatt (mw) of thermal power. For exam- 
ple, a 1,000-mw thermal power-rating reactor would 
produce 1,000 grams or 1-kg every day.) To produce 
weapons-grade plutonium, which contains more than 
94 percent plutonium-239, the reactor's irradiated fuel 
is off-loaded within a relatively short period of a few 
months. Letting the fuel stay in the reactor longer will 
result in production of undesirable isotopes such as 
plutonium-240 and plutonium-241. 

With respect to MUF, the important point is that 
there is relatively rapid loading and unloading of nu- 
clear material from these reactors, and the emphasis 
was on rushed production during the Cold War. Dur- 
ing much of the period of U.S. plutonium production, 
computer calculations of the reactor's nuclear reac- 
tions were done to estimate the amounts of plutonium 
produced in each reactor rather than measuring the 
actual amount in each batch off-loaded. These calcula- 
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tions were one of the major sources of error in deter- 
mining MUF. The MUF estimate was determined by 
using the following formula: 

MUF = Input (reactor physics calculation) - Output 
(to Plutonium Finishing Plant) - Waste (rough sample 
only) - DVessel inventory 

According to a Defense Nuclear Facilities Safety 
Board report from 1993, the input term was the most 
difficult to determine and was prone to significant er- 
rorsd^ Despite the fact that several independent analy- 
ses indicated that the reactor calculations were prone 
to errors that would overstate the plutonium input, 
these calculations were used until the early-1970s. 
However, to try to correct for these known problems, 
there were some corrections made to the codes in 1961 
and 1965, but other errors continued to overestimate 
the amount of plutonium produced. The result was 
that there were erroneous increases in MUF. Once a 
more accurate measurement system was instituted, 
the MUF tended to decrease by almost an order of 
magnitude. 

The other term that was a source of major error 
was DVessel inventory, which measured the change 
in the reprocessing plant's plutonium in its vessels be- 
fore and after a reprocessing campaign. The best way 
to calculate this value was to do a system flush after 
a campaign. Of course, that meant that during the 
campaign itself the system's operators and safeguards 
inspectors would not have an accurate account- 
ing. As the Defense Nuclear Facilities Safety Board 
report highlights: 

On at least one occasion, in trying to determine the 
cause of a MUF in excess of 40-kg in 1969, all of the 
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vessels, sumps, and catchbasins were flushed and in- 
spected: total plutonium yield was less than 10 percent 
of the MUF.15 


Unfortunately, these were not the only major prob- 
lems in accurately accounting for nuclear material. As 
mentioned earlier, discharges of nuclear material in 
waste streams and the environment were most likely 
the major reasons why the MUF values were 2.4-MT 
for plutonium and 3.2-MT for HEU. As also noted ear- 
lier, DOE corrected in 2012 its earlier 1996 plutonium 
inventory report to decrease the plutonium inventory 
difference by 0.4-MT to account for material deter- 
mined to be discarded to waste or the environment. 
In an independent scientific assessment in 1996, Dr. 
Thomas Cochran investigated plutonium inventory 
differences at the Rocky Flats Plant and documented 
numerous instances of significant MUF throughout the 
decades of operation of the plant. As he underscored, 
"The very existence of a significant MUF should trig- 
ger immediately an investigation as to its cause."^^ He 
pointed to a declassified study by L. Zodtner and R. 
Rogers in 1964 that assessed that "losses [of plutoni- 
um] have occurred almost every month, and exhibited 
large variations which may possibly have been due to 
inventory error."^^ They discussed, for example, a fire 
in 1957 that most likely resulted in the loss of about 
6-kg of MUF. But even much bigger causes of MUF 
totaled almost 580-kg of "explained" losses. The un- 
explained losses were still about 84-kg, enough for 
approximately 20 nuclear bombs depending on the 
sophistication of the bomb design.^® (This study was 
published in early-1964; Cochran details even more 
losses in his 1996 report.) While more recent studies 
of Rocky Flats have further explained much of these 
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previously "unexplained" losses (as documented 
in doe's 2012 report), there is still more than 2-MT 
of plutonium MUF associated with the U.S. fissile 
material inventory. 

As the DOE admitted in its 2012 plutonium inven- 
tory report, uncertainties remain: 

about how much plutonium was actually produced, 
processed, and discarded to waste, especially for the 
period from the mid-1940s to 1970 before advances in 
nuclear material measurement systems and computer- 
aided tools to assist in the analysis of nuclear material 
accounting data. The uncertainties are reflected in the 
2.4-MT cumulative inventory difference. This uncer- 
tainty applies especially to waste estimates, where 
quantities will continue to change and evolve as waste 
processing and characterization are performed as part 
of environmental cleanup activities.^® 

Similar uncertainties have greatly complicated the 
ability to ascertain the amounts of HEU and urani- 
um-233 produced, processed, and discarded to waste. 

THE EVOLUTION OF U.S. MILITARY NUCLEAR 
MATERIAL CONTROL AND ACCOUNTING 
SYSTEMS 

Given the problems as outlined, how did the 
United States act to try to solve them? What are the 
differences between the material control and account- 
ing systems prior to the early-1970s and today? Have 
there been significant improvements? 

From the early- to mid-1940s, mostly during the 
Manhattan Project era, records were kept in manual 
form, and there was no standardization of account- 
ing across facilities. In 1948, the first standard proce- 
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dures were developed, which served as a prototype 
for the Nuclear Material Information System (NMIS). 
NMIS was developed because, in the early-1960s, the 
AEC hired Stanford Research Institute to perform a 
feasibility study for an improved system. The authors 
of the study advised creation of a central database 
with application of statistical techniques to evaluate 
shipper-receiver differences, book physical inventory 
differences, and list unaccounted for materials. NMIS 
began data collection in 1967.^° 

There is a noticeable improvement in the pre-1968 
MUF and the post-1968 MUF for HEU. According to 
the Striking a Balance report, before 1968, there was 
269-kg U-235 MUF, and total MUF of all commercial 
sites was 995-kg. (As discussed later, a large quantity 
of HEU was unaccounted for at the Nuclear Materials 
and Equipment Corporation [NUMEC] facility prior 
to 1968.) In comparison, after 1968, there was 76-kg 
U-235 MUF, and the total of all commercial sites was 
549-kg.^^ Most likely the improvement in accounting 
systems helped decrease the MUF. But importantly, 
one needs to recognize that after 1968 the United 
States had substantively ramped down production of 
fissile material for military purposes. However, there 
was still handling of many tons of fissile material for 
the next couple of decades to the end of the Cold War. 
Since then, there has been a ramp up on the dismantle- 
ment side of handling material as the United States 
has disassembled thousands of warheads as a result of 
arms reduction agreements with Russia. 

In 1976, NMIS was renamed and became the Nu- 
clear Materials Management & Safeguards System 
(NMMSS). DOE and the Nuclear Regulatory Com- 
mission jointly managed this new system. (These two 
agencies had shortly before been created from the AEC 
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in order to separate the promotional and regulatory 
aspects of nuclear power.) NMMSS requires monthly 
reports per site and semiannual and annual reconcili- 
ations. About 250 checks are done in the software to 
assess the veracity of the data. 

In the late-1970s, the NRC identified many poten- 
tially serious accounting problems. Sidney Moglewer, 
an official in NRC's safeguards division, put the mat- 
ter starkly and provocatively: "Would you rather put 
your money in a bank with a battalion of guards and 
a sloppy accounting system, or would you choose a 
bank with a few guards and good accounting?"^^ He 
and other NRC staffers reported concerns that the ac- 
counting system was ineffective and gave "little con- 
fidence . . . that [it] would catch a skillful fuel thief."^^ 
The NRC's investigation found that the inventory dif- 
ference exceeded the limits of error about one-third 
of the time but indicated that was above the business- 
as-usual rate of 5 percent. The NRC staff's investiga- 
tion concluded that sloppy accounting was partly to 
blame, as well as the procedures to measure the limits 
of error had become inconsistent and "the entire de- 
cision structure that's in the current regulations has 
essentially no statistical basis at all."^^ While the NRC 
worked on needed upgrades, a couple of commis- 
sioners at that time expressed their concern that one 
of the main culprits for these inventory differences, 
or MUF, was at one or two facilities that handled na- 
val fuel. In particular. Commissioner Victor Gilinsky 
said, "You've got some old plants that are not set up to 
measure things accurately, and they happen to supply 
fuel for the Navy."^^ Another commissioner on back- 
ground identified the primary problem facility as the 
Nuclear Fuel Services Plant in Erwin, TN, which then 
was the main supplier of fuel for naval submarines. It 
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would routinely have MUF values of about 1-kg per 
month. Because the Navy needed the fuel, the govern- 
ment's accountants let this facility continue making 
fuel despite the large values of MUF.^^ 

DOF's Office of the Inspector General also per- 
forms inspections of DOE facilities to check on the 
effectiveness of the accounting system. In addition, 
the GAO conducts its own assessments of aspects of 
DOF's material control and accounting system. Here 
is summarized some important findings from past 
DOE inspector general and GAO reports. 

In a 1978 report, GAO noted "the inability of mate- 
rial accountability systems to accurately measure and 
account for all nuclear materials in a timely manner 
because of state-of-the-art limitations and the need for 
tighter physical security requirements" and that these 
findings were also identified in July 1976 and May 
1977 }'^ The 1978 report also found: 

Changes in reported MUF data only underscore the 
imprecision and subjective judgments involved in ac- 
counting for MUF. Authorities believe that MUF is 
attributed to measurement biases and unmeasurable 
material held up in equipment, nevertheless no one 
can be certain of the actual location of the unaccounted 
for materials.^* 

A more recent GAO report from 2011 assessed 
the U.S. Government's ability to account for, moni- 
tor, and evaluate the security of U.S. nuclear material 
overseas and found that "nuclear cooperation agree- 
ment terms ... do not stipulate systematic reporting 
of such information, and there is no U.S. policy to pur- 
sue or obtain such information." Moreover, "DOE and 
NRC do not have a comprehensive, detailed, current 
inventory of U.S. nuclear material . . . overseas that in- 
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eludes the country, facility, and quantity of material." 
Furthermore: 

[njuclear cooperation agreements do not contain spe- 
cific access rights that enable DOE, NRC, or State to 
monitor and evaluate the physical security of U.S. 
nuclear material overseas, and the United States relies 
on its partners to maintain adequate security. 

Finally, "[o]f the 55 visits made from 1994 through 
2010, U.S. teams found that countries met interna- 
tional security guidelines approximately 50 percent of 
the time."^^ 

The DOE inspector general has issued several re- 
ports detailing lapses in accounting for nuclear mate- 
rials. In an October 2001 report, the inspector general 
identified that DOE could not fully account for nucle- 
ar materials loaned or leased to domestic licensees, 
at least partly due to inaccurate and/or incomplete 
NMMSS record keeping.^” In a February 2009 report, 
it found: 

For about 37 percent (15 of 40) of the domestic facilities 
we reviewed, the Department could not accurately ac- 
count for the quantities and locations of certain nucle- 
ar materials. In a number of cases, the Department had 
also agreed to write-off large quantities without fully 
understanding the ultimate disposition of these mate- 
rials. . . . During 2004, a number of domestic licensees 
reported that their actual holdings of Department- 
owned nuclear materials were less than the quantities 
recorded in NMMSS. Based on that information, the 
Department agreed to write-off over 20,000 grams of 
special nuclear material . . . without investigating the 
whereabouts or actual disposition of the material. . . . 

A 32 gram plutonium-beryllium source on loan to a 
college and subsequently transferred to another aca- 
demic institution was not accounted for in NMMSS.^^ 
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While these problems are serious, the materials in 
question were not identified as significant amounts of 
category I nuclear material, which can be directly used 
in nuclear explosives. Nonetheless, improvements 
are needed within the management and accounting 
systems. 

Concerning improvements, the 2009 inspector gen- 
eral's report recommended conducting a confirmation 
of balances of DOE-owned materials and establish- 
ing a schedule for periodic confirmations, reconcil- 
ing this information with NMMSS data, periodically 
confirming the continuing need for DOE-owned nu- 
clear material at domestic licensees, and improving 
training. The GAO's 2011 report recommended: 

• Determining a baseline inventory of weapon- 
usable U.S. nuclear material overseas; estab- 
lishing procedures for annual reconciliations. 

• Facilitating visits to sites that U.S. physical pro- 
tection teams have not visited that are believed 
to hold category I material. 

• Seeking to include physical protection access 
rights in new or renewed nuclear cooperation 
agreements. Careful consideration should be 
given to the impact of any reciprocity clause on 
U.S. national security. 

• Developing an official central repository to 
maintain data regarding U.S. inventories of 
nuclear material overseas. 

• Developing formal goals for and a systematic 
process to determine which foreign facilities to 
visit for future interagency physical protection 
visits. 

• Periodically reviewing performance in meeting 
programmatic goals.®^ 
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A very recent DOE inspector general's report rais- 
es concerns about the Los Alamos National Laborato- 
ry's accounting system that illustrates that even 98.34 
percent accuracy is insufficient; the number of errors 
found showed that the accounting system fell short of 
its target objective of 99 percent accuracy.^^ This in- 
spector general's report is a follow-up to the Septem- 
ber 2007 report on weaknesses found at Los Alamos' 
accounting system. The July 2013 report found that 
while the "materials in question were relatively small 
and the control and accounting issues did not involve 
materials in sufficient quantity, enrichment and/or 
configuration to pose a high level of risks," these "is- 
sues were, however, worthy of correction and could 
enhance accounting of higher security category nucle- 
ar materials."^^ One of the biggest findings was that 
"it was standard practice for Los Alamos Materials 
Control & Accountability (MC&A) Group personnel 
to conduct inventories in the MBAs we reviewed only 
on a biennial basis," which raised the concern that 
"this periodic oversight was not sufficient to ensure 
MBA inventory control and accounting concerns were 
identified and addressed in a timely manner."^® 

An independent assessment a couple of years ago 
by Jonas Siegel of the University of Maryland also 
highlighted concerns about the effectiveness of the 
NMMSS. He pointed out that NMMSS: 

relies entirely on facility-level systems to provide de- 
tailed, accurate accounting data in a timely fashion . . 

. varying levels of detail leave significant gaps in what 
U.S. officials know and can report about U.S. mate- 
rials; . . . data submitted to NMMSS doesn't always 
distinguish between what material is in which mate- 
rial balance area within a facility; it doesn't always 
accurately reflect the location of in-transit materials; 
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and changes in inventory aren't always reported in a 
timely fashion.^^ 

INSIDER THREAT 

The biggest security concern often comes from 
those who know nuclear facilities best: employees 
and management. They have privileged access and, 
if managers, have authority to coerce subordinates. 
Thus, insiders have means and opportunities; it will 
just take motivations to push insiders to exploit vul- 
nerable security systems. According to the National 
Nuclear Security Administration (NNSA): 

Almost all known cases of theft of nuclear material 
involved an insider. . . . Even when the insider's illicit 
activities are observed by coworkers, they often go 
unreported due to the unwillingness of many workers 
to recognize the potential for an insider threat and to 
report on a colleague or especially a boss if a supervi- 
sor is the insider thief. 

A RAND study from 1990 found that insider/ 
outsider collusion is most relevant to potential crimes 
targeting nuclear assets. Most of the insiders profiled 
in the RAND study (focused on conventional crimes 
given the paucity of data on nuclear crimes) were 
motivated primarily or solely for financial gain. This 
finding suggested to the RAND researchers that an 
outside group "could secure an insider's assistance 
simply by paying him or her."^® Perhaps this report's 
"most important finding" is that success of the crimi- 
nal operation "seemed to depend less on detailed 
planning or expert execution than on the exploitation 
of existing security flaws." The RAND report, how- 
ever, emphasized, "none of the organizations in our 
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database employed security equivalent to that at a 
nuclear facility."^® 

The RAND study also found that guard forces 
pose a "particularly vexing problem"; specifically, 
guards "were responsible for 41 percent of the crimes 
committed against guarded targets" [emphasis in the 
original]. Guards obviously know the security rou- 
tines and can exploit times when supervisors may not 
be watching or checking up on the guards. 

In addition, the RAND report highlights motiva- 
tions other than financial gain, including "family ties, 
misplaced altruism, and ideological allegiances." It 
cautions that: 

security considerations in hiring, guarding, control- 
ling, and checking people can become so cumber- 
some as to impede the operation of the facility they 
are meant to protect. Therefore, no organization, no 
matter how ingeniously protected, can operate with- 
out some trust in individuals on all levels. . . . Total 
security can never be attained, nor can insider crime 
ever be completely prevented. However, security of- 
ficials can and must keep all possibilities in mind at all 
times, to avoid surprises and to be prepared at least to 
minimize damage.^** 

To protect against thefts of nuclear material, the 
NNSA recommends and implements a multilayered 
approach. NNSA categorizes these approaches into 
two areas: administrative controls and policies, and 
technical systems. For the former, "human reliability 
programs help identify at-risk employees before they 
can become a threat." NNSA also highlights nuclear 
security culture programs that: 
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educate employees on the threat, encourage robust 
procedural adherence and effective management, and 
help employees understand their personal responsi- 
bility for nuclear material security 

While nuclear security culture is important, it is 
not sufficient to stop a highly motivated insider; in 
that respect, personnel reliability programs are essen- 
tial but may still not be enough. Consequently, to fur- 
ther strengthen the multilayered approach to security, 
technical systems provide access controls, material 
controls, and detection and delay features. 

Access control systems and material controls can be 
used to help enforce administrative controls such as 
the two person rule, compartmentalization of infor- 
mation, and separation of duties. Detection systems 
identify when an insider violates access requirements, 
and delay barriers can impede an insider from access- 
ing a target.^^ 

An independent assessment from the late-1980s 
emphasized the importance of enforcing the two-per- 
son rule but pointed out that there has been substan- 
tial resistance to implementing it.^^ 

THE CASE OF NUMEC AND THE MISSING HEU 

Perhaps the greatest alleged incident of insider 
theft happened in the 1960s at NUMEC, located in 
Apollo, PA. NUMEC was a nuclear fuel processing 
plant. In 1965, an AEC inspection at the facility dis- 
covered more than 100-kg of unaccounted for HEU. 
But for several years after this finding, concerns were 
mounting that the U.S. Government was covering up 
what happened to the unaccounted for HEU. In part 
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to address these concerns, in 1977, 12 years after the 
aforementioned inspection, John Dingell, then the 
Chairman of the House's Subcommittee on Energy 
Power of the Committee on Interstate and Foreign 
Commerce, requested that the GAO investigate the 
so-called NUMEC affair. Specifically, he asked GAO 
to concentrate primarily on two questions: 1) What 
information has been developed about the alleged di- 
version? and 2) Were the investigations done by the 
federal government adequate? 

GAO reported that it was seriously constrained in 
its review because it "was continually denied neces- 
sary reports and documentation on the alleged inci- 
dent by the Central Intelligence Agency (CIA) and 
the Federal Bureau of Investigation."^ The allegations 
included: 

• The material was illegally diverted to Israel 
by NUMEC' s management for use in nuclear 
weapons. 

• The material was diverted to Israel by NU- 
MEC' s management with the assistance of the 
CIA. 

• The material was diverted to Israel with the ac- 
quiescence of the U.S. Government. 

• There has been a cover-up of the NUMEC inci- 
dent by the U.S. Government.^® 

The GAO did point out that the government inves- 
tigations had put pressure to improve the U.S. safe- 
guards program. Indeed, there has yet to be an inci- 
dent of this alleged magnitude since 1965. Regarding 
GAO's investigation of the relevant documents from 
previous investigations: 
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GAO cannot say whether or not there was a diversion 
of material from the NUMEC facility. DOE has taken 
the position that it is aware of no conclusive evidence 
that a diversion of nuclear material ever occurred at 
the NUMEC facility, although it recognizes that the 
possibility cannot be eliminated.^® 

In addressing Chairman Dingell's key questions, 
the GAO concluded that U.S. Government agencies' 
investigations were "uncoordinated, limited in scope 
and timeliness . . . and less than adequate."^^ Another 
important finding was that the United States: 

needs to improve its efforts for effectively respond- 
ing to and investigating incidents of missing or unac- 
counted for weapons-grade nuclear materials. In view 
of increasing terrorist activities throughout the world, 
the ability to respond and investigate such incidents 
should be of concern to national security and the pub- 
lic health and safety.^® 

In a much more recent article on this alleged di- 
version, Gilinsky and Roger Matson document that 
by the early-1960s, there were "worrisome signs" that 
NUMEC's "security and accounting were deficient."^® 
They also pointed out concerns about the chief ex- 
ecutive officer's connection to the Israeli government 
and the visits by Israeli officials and technical experts. 
While, like the GAO, they note that no direct evidence 
of a diversion was ever uncovered, they believe, based 
on their extensive assessment, that "the circumstantial 
evidence supports the conclusion that the HEU ended 
up in Israel."™ 
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CONCLUSION: ADEQUACY OF 

TIMELY WARNING AND THE WILLINGNESS 

TO ACT 

What are "good enough" accounting procedures? 
Adequate accounting should, at a minimum, give 
enough warning of a potential theft or diversion of a 
bomb's worth of nuclear material. As mentioned sev- 
eral times in this chapter, the United States has had in- 
cidents where accounting lapses have occurred or an 
alleged major insider theft has happened. Assuming 
that thefts or diversions had occurred, the warning 
signs would have come too late to prevent someone 
or some group from making any possibly stolen or di- 
verted nuclear material into nuclear explosives. Effec- 
tive safeguards should deter diversion by raising the 
risk of getting caught. But if weeks, months, or even 
more than 1 year can go by without detection, the ac- 
counting system is not adequate because in as little as 
1 week, a few kilograms of category I nuclear material 
could be enough to make a nuclear explosive. None- 
theless, as discussed in this chapter, the United States 
made significant improvements in its accounting 
system after the 1960s. But as recent GAO and DOE 
inspector general reports have indicated, the United 
States still has improvements to make in its current 
accounting system because it has yet to meet its own 
standards. 
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CHAPTER 3 


A BRIEF COMMENTARY ON 
"U.S. MILITARY NUCLEAR MATERIAL 
UNACCOUNTED FOR: 

MISSING IN ACTION OR JUST 
SLOPPY PRACTICES?" 

Thomas B. Cochran 
Matthew G. McKinzie 

Special nuclear material (SNM) is an integral part 
of nuclear energy and nuclear weapons, and the pri- 
mary means for protection of SNM is safeguards. Safe- 
guards address the questions: "Is SNM missing?" and 
"If SNM is missing, how much is unaccounted for and 
when did it go missing?" There are two main elements 
to safeguards: 1) methods of containing and monitor- 
ing SNM; and 2) methods of accounting to keep track 
of SNM quantities and locations. Methods of contain- 
ing and monitoring SNM are such safeguards as vaults 
and locks, armed guards, personnel security clearanc- 
es, and, as we discuss later, the two-person rule. The 
importance of accounting methods for safeguards is 
the insider threat to diversion of SNM, where the first 
category of safeguards could be plausibly bypassed 
by someone with inside knowledge and access. 

Within safeguards, the terms "inventory differ- 
ence" (ID) and "material unaccounted for" (MUF) are 
equivalent, and are defined as a "book inventory" of 
SNM minus the "physical inventory" of SNM, where 
the book inventory is the quantity of material present 
at a given time as reflected by accounting records, and 
the physical inventory is the quantity determined to 
be on hand by, first, physically ascertaining its pres- 
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ence, and then using techniques that include mea- 
suring, sampling, weighing, and analysis. A central 
thesis in Chapter 2, "U.S. Military Nuclear Material 
Unaccounted For; Missing in Action or Just Sloppy 
Practices?" by Charles D. Ferguson, is that the United 
States is not currently achieving acceptable standards 
addressing MUF for defense programs SNM, and if 
this is true for the United States, then this is likely 
true for other nuclear weapon states such as Pakistan 
and Russia. 

We agree with the author that in the first decades 
of the Cold War, inattention to SNM accounting, as 
well as poor industrial practices, led to large values of 
MUF in the U.S. nuclear weapons program. Thomas 
Cochran documented plutonium inventory differenc- 
es at the Rocky Flats Plant outside of Denver, CO, in a 
1996 report: 

It is a shameful legacy of the contractor operations 
of the Rocky Flats Plant that internal accounting and 
off-site environmental measurements of plutonium 
did not receive the attention they demanded from the 
very start of Rocky Flats operations in 1952. At Rocky 
Flats the uncertainties in estimated plant releases, re- 
constructed radiation doses and public health effects, 
when derived from off-site contamination measure- 
ments, are very large. The upper end of these esti- 
mates no doubt will be consistent with the very large 
MUF values at Rocky Flats — that is, with what we do 
not know about the whereabouts of much of the plu- 
tonium. The plutonium release estimates could be in- 
creased by orders of magnitude and still be consistent 
with the MUF.i 

Today, however, the United States is not producing 
SNM for nuclear weapons purposes. The U.S. Depart- 
ment of Energy (DOE) site receiving and processing 
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large quantities of SNM in the form of intact weap- 
ons and after disassembly, weapons components, is 
the Pantex Plant near Amarillo, TX. However, SNM 
in discrete, countable forms will be amenable to much 
better accounting than SNM in bulk handling and pro- 
cessing, as was the case during the Cold War where 
the uncertainties in material accounting were so large 
that they exceeded the required quantity of material 
for weapons. 

With respect to material accounting at Pantex, 
little public information exists on the safeguards sys- 
tem used at this site. Two memos from the Defense 
Nuclear Facilities Safety Board made available on the 
Board's website^ described material accountability in- 
cidents at Pantex, currently operated by the contractor 
Babcock and Wilcox (B&W): 

[January 6, 2012]: B&W uses the Pantex Material 
Move System (PMMS) to authorize all movements of 
nuclear explosives, nuclear material, certain types of 
nuclear explosive-like assemblies, and certain types 
of explosives. A software-based electronic material 
move system called Move Right serves a critical role 
in PMMS authorization as it helps to ensure that all 
moves comply with the material limits specified in the 
documented safety analysis. B&W recently identified 
a discrepancy between the quantity of plutonium list- 
ed in the Move Right system and the quantity listed in 
an electronic thermal monitoring system for a particu- 
lar facility. The discrepancy existed for approximately 
1 week before transportation personnel evaluated the 
physical configuration of the facility and confirmed 
that the quantity in the thermal monitoring software 
was correct, and the material was in the correct loca- 
tion. Upon further evaluation, information technol- 
ogy (IT) personnel discovered that a B&W software 
subroutine that should have updated the Move Right 
system to reflect the quantities in the thermal monitor- 
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ing system had not initiated. B&W plans to conduct a 
cause analysis of the event. IT personnel are perform- 
ing daily checks to validate the proper function of any 
software that transfers information between systems 
that track accountable material.^ 

[September 30, 2011]: This week, technicians were 
performing nuclear material accountability walk- 
downs when they discovered a discrepancy between 
the quantity of nuclear material listed in the electronic 
material inventory system and the actual quantity of 
material present in a facility. Manufacturing person- 
nel have identified the facts surrounding the event 
and determined that a weakness exists in the process 
that they rely on to ensure that the nuclear material 
and explosive facility limits specified in the safety ba- 
sis are not violated. B&W ensures compliance with 
material limits using a software-based electronic ma- 
terial move system and various independent checks 
to verify consistency between the material move pa- 
perwork, the electronic system, and the actual compo- 
nent. However, once the component has been pack- 
aged, technicians are completely reliant on a barcode 
card (containing the level of assembly, part number, 
serial number, etc. . . .) as the source of information for 
the electronic material move system. Several of these 
cards can be present in a facility at a time since the 
cards are created and assigned to components and dif- 
ferent levels of assembly as a unit transitions through 
an assembly or disassembly process. This material in- 
ventory discrepancy was introduced when technicians 
inadvertently swapped the barcode cards for differ- 
ent levels of assembly prior to moving an item. The 
discrepancy has since been resolved. Manufacturing 
management plans to conduct a formal cause analysis 
of the event with the objective of identifying corrective 
actions that would eliminate this vulnerability from 
the B&W material tracking process.^ 
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These examples illustrate that a necessarily com- 
plex safeguards system will plausibly have gaps, (i.e., 
multiple barcode cards), and those gaps could be 
exploited from an insider threat. 

Chapter 2 introduces the reader to the Nucle- 
ar Materials Management and Safeguards System 
(NMMSS), a U.S. safeguards system jointly managed 
by the Department of Energy (DOE) and the Nuclear 
Regulatory Commission (NRC). Regarding methods 
of containing and monitoring SNM, the NRC recently 
shelved consideration of the "two-person rule," a re- 
quirement that "two qualified and authorized indi- 
viduals are present" when working with SNM. As Dr. 
Ed Lyman from the Union of Concerned Scientists re- 
cently observed, the two-person rule is a "requirement 
that could greatly reduce the insider threat at U.S. 
nuclear facilities handling nuclear weapon-usable and 
other sensitive nuclear materials."^ Regarding meth- 
ods of accounting within the NMMSS, the statistical 
analysis for SNM accounting in material balance ar- 
eas provides critical information for safeguards; how- 
ever, based on our information, a statistical analysis 
for SNM accounting are not required reporting within 
the NMMSS from individual DOE sites. An NMMSS 
information circular posted online*’ lists monthly due 
dates for transactions and inventory, roughly 2 weeks 
following the "Reporting Month." 

In conclusion, while serious problems with MUE 
have been documented for the U.S. nuclear weapons 
program during the Cold War, the DOE today is not 
producing SNM for nuclear weapons purposes, and 
therefore we do not expect this issue to be as significant 
as it has been in the past. While anecdotal evidence 
suggests that challenges to SNM safeguards persist at 
DOE and at NRC, the information required for a full 
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picture of the state of safeguards in the United States, 
or in other nuclear weapon states, is not available to 
the public due to classification of technical data. 
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CHAPTER 4 


SOMETIMES MAJOR VIOLATIONS OF 
NUCLEAR SECURITY GET IGNORED 

Victor Gilinsky 

The traditional justification for accepting nuclear 
power activities around the world, despite their obvi- 
ous technological overlap with military ones, is that 
they are covered by agreements restricting them to 
"peaceful uses," and that any violations of these agree- 
ments would be detected in time by international in- 
spectors or by national intelligence. "In time" means 
that a violation would be detected early enough so 
that the international community could use the infor- 
mation to thwart the effort to make bombs. 

At this point, all non-nuclear weapon countries 
are members of the Nuclear Nonproliferation Treaty 
(NPT), so we are talking about the "safeguards" of 
the International Atomic Energy Agency (IAEA). The 
objective of these safeguards is thus to dissuade any 
would-be bomb makers from even attempting a viola- 
tion for fear of a swift response. As stated in the basic 
IAEA safeguards document, the objective is: 

the timely detection of diversion of significant quanti- 
ties of nuclear material from peaceful nuclear activities 
to the manufacture of nuclear weapons . . . and deter- 
rence of such diversion by the risk of early detection.^ 

BUT, OF COURSE, THERE IS MORE TO IT 

We know that some countries and leaders have 
been willing to take risks to make bombs, and some 
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have managed to avoid detection in the first stages 
of violations. To reduce the chance of such detection 
failures in the future, there are frequent policy sug- 
gestions that we spend more money on IAEA safe- 
guards and on national intelligence to improve detec- 
tion. Israel, India, and Pakistan never joined the NPT, 
but their bomb making involved violations of other 
nuclear-related agreements and understandings, and 
failures to detect these played a role in the ability of 
these countries to finesse international opprobrium. 

But, of course, there is more to deterring violation 
of agreements than assuring detection. The IAEA's 
safeguards factsheet takes a realistic view — it says ef- 
fectiveness in stifling proliferation as it relates to nu- 
clear energy activities depends on three things: aware- 
ness of all nuclear activities in the various countries 
(to eliminate the possibility of clandestine facilities), 
physical access for inspectors to check on materials, 
and the "will of the international community ... to 
take action."^ All are important, but the last, enforce- 
ment of the rules, is key, and it is the hardest to assure. 

U.S. President Barack Obama underlined the need 
for firm international enforcement of nuclear rules in 
his 2009 Prague speech: 

We need real and immediate consequences for coun- 
tries caught breaking the rules . . . Some countries 
will break the rules. That's why we need a structure 
in place that ensures when any nation does, they will 
face consequences.^ 

He was talking about the NPT, but the suggestion 
applies more broadly to security agreements and laws 
and understandings with the three non-NPT states — 
India, Israel, and Pakistan.^ The trouble is, even when 
solid information on violations is available early 
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enough, the main countries on whose action interna- 
tional enforcement depends are sometimes reluctant 
to take needed action. If they do not, however, if there 
is no sure and swift response, then there is also no 
sure deterrence for subsequent events. 

THE WILL TO RESPOND IS NOT A SURE THING 

It is a familiar phenomenon in ordinary life that 
a friend of a violator of the law, or even a victim, is 
reluctant to report a crime. It also happens on an in- 
ternational level in dealings between states. It is natu- 
ral, understandable, and difficult to rule out, however 
much of it undermines the rule of law. It suggests, 
therefore, that the seemingly plausible theories on 
how international safeguards would work if we only 
had adequate intelligence are just that, theories, and 
cannot be entirely relied upon in practice. 

The example I want to concentrate on is the fail- 
ure of the United States to react to the theft by Israel 
of highly enriched uranium (HEU) from a U.S. plant 
in Apollo, PA, in the mid-1960s. Aside from being an 
abuse of what friendly countries expect of each other, 
it was a flagrant violation of the U.S. Atomic Energy 
Act that could have subjected the perpetrators to the 
death penalty. I will explain in some detail why the 
conclusion that the Israelis swiped the material is in 
the beyond-a-reasonable-doubt category. 

In 2010, 1 co-authored an article about the affair in 
the Bulletin of the Atomic Scientists that pointed strong- 
ly to Israel as the guilty party. ^ I got lots of e-mail in re- 
sponse to the article, including from people who had 
held high positions in the nuclear world. No one ever 
wrote to me questioning the conclusion. 
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The Apollo theft is not the only such case in which 
the United States ignored a grave proliferation-related 
violation by Israel. Perhaps the most important such 
case involved Israel's 1979 bomb tests off South Af- 
rica.® These tests violated the Limited Test Ban Treaty, 
of which Israel is a party. But the story that fits best 
with the material accounting theme of this book is the 
event at Apollo. 

FEIGNING IGNORANCE TO AVOID 
RESPONDING 

For obvious reasons — the strong support Israel has 
in domestic U.S. politics — the country is a special case 
when it comes to any U.S. governmental action. So it 
is not surprising that the U.S. Government was not 
inclined to take tough action in response to the dis- 
appearance of HEU at Apollo. This policy of feigning 
ignorance about nuclear violations when it was incon- 
venient to mention them was not, however, restricted 
to Israel. For different reasons, the United States also 
looked the other way at serious bomb-related viola- 
tions in India, Pakistan, and North Korea. 

When Congress started asking questions about 
possible U.S. involvement after India's 1974 bomb, the 
State Department presented misleading heavy water 
accounting to make it appear that there was no such 
involvement. In fact, India produced the plutonium for 
its bomb in its Canadian-Indian Reactor, U.S. (CIRUS) 
reactor, using American-supplied heavy water. The 
State Department never acknowledged that such use 
by India was a clear violation of the 1956 U.S.-India 
heavy water contract, which restricted applications to 
"research into and the use of atomic energy for peaceful 
purposes."^ India went on to stockpile CIRUS plutoni- 
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um for weapons, and thus some fraction of its nuclear 
warheads use plutonium produced illegally with U.S. 
heavy water. The United States has taken no notice 
of this. 

Pakistan's nuclear weapons program was also a 
beneficiary, at a crucial time for it, of what might be 
called American benign neglect. The executive branch 
pretended ignorance to an extent of Pakistan's HEU 
production in the 1980s and maintained that position 
as long as it could in the face of facts, when the United 
States thought it needed Pakistani help to fight the 
Soviets in Afghanistan. 

The case of North Korea was rather different in 
that its 1992 violation of its NPT responsibilities was 
public and obvious. Pyongyang refused to permit the 
IAEA inspectors to complete their check of its initial 
nuclear material declaration upon joining the treaty. 
In particular. North Korea would not let the agency 
inspect two waste sites to check whether the country 
had performed illicit reprocessing, which, of course, it 
had. North Korea threatened that if the IAEA insisted 
on the inspection, it would leave the treaty altogether. 
U.S. and other diplomats were afraid that a North Ko- 
rean departure from the NPT would threaten the suc- 
cess of the upcoming 1995 NPT Review Conference at 
which the United States hoped to make the treaty per- 
manent. Of course, if the North— which had a small 
reactor and reprocessing plant and was building two 
other reactors — left the treaty, it would be free to turn 
its facilities to military use. Adding to that was the 
constantly worrisome presence of thousands of North 
Korean artillery pieces trained on Seoul, South Korea. 

The threats worked, and in 1994, instead of press- 
ing for international sanctions against North Korea 
for its NPT violation, the United States offered it a 
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very generous deal in return for staying in the treaty. 
This deal, known as the Agreed Framework, included 
shielding the North from any NPT enforcement ac- 
tions by postponing more or less indefinitely the dis- 
puted inspections.® In addition, in return for stopping 
its two nuclear construction projects, the United States 
offered the North two large U.S.-type light water reac- 
tors (LWRs), to be built and paid for by the South Ko- 
reans and Japanese, and a generous supply of oil.^ The 
deal fell apart at the start of the administration of U.S. 
President George W. Bush when, in a meeting with a 
U.S. representative, the North Koreans admitted they 
had a secret uranium enrichment project.^® A contrib- 
uting factor was that it was becoming obvious North 
Korea did not intend to allow the disputed inspec- 
tions. The significant result, however, in terms of the 
NPT, was that the violator's threats forced the United 
States and other major NPT members to back off. 

IGNORING ISRAELI THEFT OF HEU IN 1960s 

To return to the principal subject of this note, 
in the mid-1960s, the Apollo Plant, which had been 
processing large quantities of HEU fuel for the U.S. 
Government, could not explain the loss of about 100 
kilograms (kg) of HEU. The plant was operated by the 
Nuclear Materials and Equipment Corporation, which 
was known as NUMEC. The loss, and some of the cir- 
cumstantial evidence known at the time connecting 
NUMEC's owners with Israel, caused considerable 
consternation within the U.S. Atomic Energy Commis- 
sion (AEC), the agency that licensed the activity. Dif- 
ficult as it is to believe, the loss was never investigated 
in a comprehensive way by the AEC or the Federal 
Bureau of Investigation (FBI), which had responsibil- 
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ity for investigating criminal violations of the Atomic 
Energy Act. The Central Intelligence Agency (CIA), on 
a separate and independent track, took an interest in 
the case as it related to the interest in Israel's secret 
nuclear weapons program and came to believe the 
missing HEU ended up in Israel. 

The whole affair was enveloped in secrecy and, 
while there was some reporting in the press, the key 
documents did not, and have not, seen the light of 
day. At least four U.S. presidents — Lyndon Johnson, 
Richard Nixon, Gerald Ford, and Jimmy Carter —were 
aware of the case and kept it under wraps, and it has 
stayed that way.^^ 

WHAT DOES "COULD NOT EXPLAIN" MEAN? 

A word is in order on what it means that the loss 
of HEU "could not be explained" (the usual term of 
art is "material unaccounted for" or MUF). The Apollo 
Plant's overall loss of HEU during material processing 
was in fact much larger than the approximately 100- 
kg reported in 1965. The plant and AEC understood 
that there were certain natural loss mechanisms, in- 
cluding escaping gases, fluids, material stuck to pip- 
ing and equipment, etc., which were estimated and 
subtracted from the total loss. As they were both in- 
terested in minimizing the announced losses, we can 
be sure both NUMEC and the AEC assigned generous 
amounts to these loss pathways in the original inven- 
tories. The unexplained loss was what remained after 
all these possible process losses had been subtracted 
from the overall loss. 

Over the couple of years after 1965, another loss of 
100-kg could not be explained, so there remained in all 
about 200-kg total unexplained. Unexplained losses 
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were common in the industry, but NUMEC's losses 
were an unusually high percentage of the throughput 
while the original NUMEC management operated the 
plant (which continued for a time after the plant was 
sold to Atlantic Richfield in 1967). DOE's 2001 report 
stated that Apollo's cumulative HEU loss from the 
start of operations in 1957 through 1968 was 269-kg of 
uranium-235, including the approximately 100-kg that 
was missing in 1965. It also reported that only 76-kg 
was unaccounted for in the period from January 1969 
until 1978, including the 8 years that Babcock & Wil- 
cox (B&W) ran the operation, during which the plant's 
HEU "throughput" increased substantially. Records 
from the time indicate that losses of HEU in the 10 
years of operation through 1968 exceeded 2 percent 
of HEU throughput, while losses in the 10 years after 
1968 were less than 0.2 percent of throughput. 

But there was more than simply material account- 
ing to the concern that the missing material was stolen. 

WAS THE MATERIAL EVENTUALLY FOUND? 

1 have first to clear away the oft-repeated claim 
that the missing "100-kg" of HEU was recovered 
when the Apollo Plant was taken apart. Seymour 
Hersh, in The Samson Option, wrote that the missing 
"100-kg" HEU was recovered when the Apollo Plant 
was taken apart.^^ Beginning in 1978, B&W, which 
bought the plant from Atlantic Richfield, did carefully 
dismantle Apollo, recovering HEU containing 95-kg 
of uranium-235 from equipment and structures, and 
estimating that another 31-kg was left unrecovered in 
the concrete floor and walls, for a sum of 126-kg. 
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But the cumulative MUF — the unexplained miss- 
ing amount— for the entire 1957-78 period of HEU 
operations at Apollo was 463-kg. That leaves 337-kg 
as the cumulative amount of HEU still unaccounted 
for — more than three times the MUF in the 1965 in- 
ventory. In other words, the fact that about 100-kg of 
uranium-235 in the form of HEU was found during 
post-1978 decommissioning does not bear on whether 
the 100-kg that AEG could not account for in 1965 in- 
ventory, or the larger amount that went missing dur- 
ing the 1966-68 period, was diverted. 

In fact, some or all of the material recovered dur- 
ing dismantling may have already been in the "ac- 
counted for" category, that is, already included in the 
normal industrial loss category. That would already 
have been subtracted from the total loss, and it made 
no sense to subtract it again. In any case, the conclu- 
sion stands that: The found 100-kg does not bear on 
whether there was a diversion. 

REASONS TO BELIEVE ISRAEL SWIPED HEU 

This brings us to the various elements of circum- 
stantial evidence that the unusually high unexplained 
HEU losses while under NUMEC management point 
to thefts by Israel. The potentially most dispositive 
evidence is the reported CIA claim that, around 1968, 
it obtained environmental samples in Israel of HEU 
that match the HEU output of the Portsmouth ura- 
nium enrichment plant. Portsmouth produced fuel of 
higher enrichment than any other enrichment plant 
in the world. If the environmental samples taken in 
Israel were significant enough to identify this ultra- 
high enrichment, it would be a firm indication that the 
missing NUMEC HEU ended up in Israel. It was ap- 
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patently this data that convinced the CIA that its ear- 
lier suspicions about NUMEC were correct. The prob- 
lem from our point of view is that the basic documents 
remain highly classified, and all we have are various 
reported conversations about the environmental sam- 
ples that made it into the public domain. In any event, 
the CIA's conclusions drew attention to NUMEC. 

The NUMEC plant was owned and managed by a 
group with close Israeli ties. The company president, 
Zalman Shapiro, met frequently with Israeli scientific 
attaches, who were obviously intelligence agents, and 
he gave evasive and contradictory responses about 
these meetings. He also visited Israel frequently. He 
admitted meeting with the head of Israeli military in- 
telligence and knowing the head of LAKAM, the se- 
cret scientific intelligence agency that conducted dar- 
ing operations.^^ 

Israeli intelligence was obviously aware of the op- 
portunities NUMEC' s loose material accounting of- 
fered to snatch HEU for Israel's weapons program. 
During the early- to mid-1960s, Israel did not yet 
have plutonium from its Dimona reactor. HEU would 
have been a highly sought after commodity. It was, 
of course, a nuclear explosive and could be used in 
warheads. It could also serve as driver fuel to increase 
the power of the Dimona reactor and thus increase 
plutonium production. Israeli intelligence, especially 
LAKAM, had a stop-at-nothing approach to further 
Israel's nuclear weapons program, did not let oppor- 
tunities slip, and was accustomed to taking big risks. 

One might at first think that, however daring the 
Israelis, they would hesitate to run an illegal diver- 
sion of HEU at NUMEC because of the obvious risks. 
That thought should have been put aside after the 
elaborate Jonathan Pollard spying operation during 
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the mid-1980s, in the course of which, in a specially 
outfitted house in Potomac, MD, Israel stole and cop- 
ied thousands of highly classified U.S. intelligence 
documents. The Israelis then did not cooperate with 
the U.S. investigation of the case. In a book about the 
Pollard operation. Wolf Blitzer wrote: 

... a widely held attitude among Israeli officials that 
Israel can get away with the most outrageous things. 
There is a notion among many Israelis that their Amer- 
ican counterparts are not too bright, that they can be 
'handled' thanks partially to the pro-Israel lobby's 
clout in Congress.^^ 

NUMEC was a commercial agent for Israeli gov- 
ernment agencies. It also was in a partnership with 
Israelis ostensibly to develop technology to irradiate 
fruit to eliminate insects. The partnership was called 
ISORAD, and the small board at the Israeli end in- 
cluded the chairman of the Israeli Atomic Energy 
Commission, almost all of whose effort was devoted 
to weapons. Under the ISORAD rubric, NUMEC sent 
large shipments to Israel. These were large enough to 
cover shipments of illicit HEU. At the time, there were 
no government controls over such shipments. Nor did 
the AEC keep track of the amounts of nuclear materi- 
als exported; it relied on commercial firms to maintain 
their own records. According to FBI interview reports, 
NUMEC delivered a 600-pound package, listed as con- 
taining neutron sources, to El A1 Airlines in December 
1963. The AEC's 1965 inventory showed that more 
HEU went missing from the Apollo Plant in 1963 than 
any other year.^® 

Former NUMEC employees also told FBI agents 
about strange truck shipments in the 1960s that went 
directly to Israeli ships docked in the New York area. 
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One recalled an unusual truck loading what looked to 
be HEU containers from the plant one night in 1965 
or 1966. He said that an armed guard ordered him to 
leave the area. Others claimed to have been threatened 
by NUMEC managers to keep quiet about what they 
saw at the loading docks. It is difficult at this point 
to assess these accounts. The FBI does not appear to 
have followed up, which is a significant example of 
how obvious violations sometimes get handled in a 
politically charged case. Of all of the various aspects 
of the Apollo affair, the one I find the most intriguing 
involved the 1968 visit to the plant of high-level Israeli 
agents, men used to running complex illegal opera- 
tions, with false identities. 

ISRAELI QUARTET 1968^® 

In September 1968, four Israeli visitors arrived at 
Apollo, supposedly to discuss small plutonium 238 
power sources NUMEC was developing.^^ NUMEC 
had to get AEC permission for the foreign quartet to 
visit the Apollo facility and so had to identify them. 
Their guide was Avraham Hermoni, scientific coun- 
selor at the Israeli Embassy in Washington, and a 
frequent visitor to NUMEC. The others were listed 
as Rafael Eitan, chemist. Ministry of Defense, Israel; 
Avraham Bendor, Department of Electronics, Israel; 
and Ephraim Biegun, Department of Electronics, Is- 
rael. Hermoni identified himself correctly. But no one 
in the AEC security apparatus seemed to know that he 
had been technical director of Israel's nuclear bomb 
project at Rafael, Israel's armament development au- 
thority. As scientific counselor, he surely reported to 
LAKAM. The others falsified their affiliations. 
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Eitan was not a chemist; he was a high-level, high- 
ly experienced Mossad agent who headed the team 
that captured Adolf Eichmann in Argentina in 1960. 
In later years, Eitan became an adviser to Israeli Prime 
Minister Menachem Begin and, in 1983, took charge of 
LAKAM, the scientific intelligence agency, in which 
role he ran the Pollard spying operation in the 1980s. 
No one seems to have asked what a top intelligence 
operative like Eitan was doing at the Apollo Plant in 
1968 or why he lied about his affiliations.^® It is impos- 
sible to believe that the president of NUMEC, who had 
very close Israeli ties, including ties at the top level of 
Israeli intelligence, did not know Eitan' s identity. Yet 
NUMEC passed on the false information to the AEC. 

With Eitan was Avraham Bendor, who was not af- 
filiated with a Department of Electronics; there was 
no Department of Electronics. His real name in Israel 
was Avraham Shalom (Bendor was his name before 
he immigrated to Israel). He was a long-time Shabak 
agent and served as Eitan' s right-hand man in Eich- 
mann' s capture, in charge of logistics, that is, getting 
Eichmann from a safe house past airport guards onto 
an Israeli plane. He became the head of Shabak in 1981 
but was forced to retire in 1986 after he ordered, and 
then covered up, the deaths of two Palestinian prison- 
ers; in short, a tough character.^® He was not exactly 
the kind of person you would send to evaluate pluto- 
nium batteries, the supposed purpose of the mission 
to Apollo, but he would be the right man for figuring 
out how to move material offsite. 

The third man, Ephraim Biegun, was the head of 
the Mossad's Technical Department.^® Hermoni, of 
course, knew the trio's real identities, which meant 
that he, as an accredited Israeli diplomat, not only 
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participated in, but more likely orchestrated, the lie to 
U.S. authorities. There is no indication that anyone in 
AEC security grasped who these visitors really were. 

HOW COULD THIS BE IGNORED? 

It would be natural to assume that all these events 
have been thoroughly investigated by the AEC, the 
EBI, congressional committees, the White House, 
and the CIA. In fact, difficult as it is to believe, as we 
shall see, they were not. What is interesting for our 
purposes are the multiple ways in which bureaucratic 
politics, domestic politics in general, and international 
interests combine to submerge information about is- 
sues of genuine national security importance in rela- 
tion to nuclear proliferation. 

After the 1965 discovery that the loss of a large 
amount of HEU at NUMEC could not be explained, 
the main concern of the AEC commissioners, led by 
Chairman Glenn Seaborg, was not that someone made 
off with it, but that, if the matter became public, it 
would bring criticism of its overall nuclear power pro- 
gram. The AEC was in an embarrassing fix because it 
had not been doing its job. It had assumed that pri- 
vate firms working with HEU would minimize losses 
because of the intrinsic value of the material. The 
Commission licensed exports but did not keep track 
of what got sent. It had never imagined that material 
could be stolen and sent abroad. 

What it now feared most was the reaction of the 
members of the powerful Joint Committee on Atomic 
Energy, the AEC's congressional oversight commit- 
tee and the ones who really ran the agency. An AEC 
team questioned NUMEC employees. But the AEC 
General Counsel's attorney in charge made sure they 
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did not take any written statements and/or pursue 
any indication of illegal activity. The commissioners 
and staff rallied around a story line that dismissed the 
possibility of any criminality. 

This position was essential to talking the FBI out 
of entering the case, because the FBI was charged with 
investigating criminal violations of the Atomic Energy 
Act. As it turned out, the FBI Washington Office, for 
its own bureaucratic reasons, did not seem eager to get 
involved, perhaps because it saw material accounting 
as a technical issue in which it lacked competence. In 
any case, the FBI focused on the question of whether, 
in view of NUMEC's function as an agent for Israeli 
government agencies, its president, Zalman Shapiro, 
should have registered as a foreign agent. 

Unlike the EBI, the CIA, coming to the case from 
its interest in Israel's rapidly moving nuclear weap- 
ons program, was interested in NUMEC as a possible 
source of HEU for Israel. By 1968, on the basis of in- 
formation obtained in Israel, the CIA was convinced 
that Israel had HEU and that it came from NUMEC. 
But the CIA was not permitted by law to conduct a 
domestic investigation. In April 1968, CIA Director 
Richard Helms wrote Attorney General Ramsey Clark 
a letter (one of the key documents that remain highly 
classified) suggesting that HEU processed at Apollo 
might have ended up at Dimona and asked that the 
FBI investigate.^^ After the memo from the CIA, Clark 
imposed surveillance on Shapiro, which lasted about 
a year and produced information on his contacts 
with Israel that increased concern about NUMEC. 
Helms informed President Johnson of the CIA's sus- 
picions. Johnson reportedly told Helms, "Don't tell 
anyone else, even Rusk and McNamara." It was an 
election year. 
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KISSINGER TO NIXON 1969 


After he became president, Richard Nixon took an 
interest in the NUMEC case, but not so much about 
the missing HEU but rather about Shapiro's connec- 
tions with Israel. At the start of the administration, 
the question of whether Shapiro should keep his AEG 
clearance at one time or another occupied the atten- 
tion of the Attorney General, the Secretaries of State 
and Defense, the White House Counsel, the Science 
Advisor, the National Security Advisor, the AEC 
Chairman, and the FBI Director. 

During 1969, U.S. National Security Advisor Hen- 
ry Kissinger conducted a secret interagency study 
on how to deal with Israel's rapid advance toward 
nuclear weapons. (In truth, Israel had already pro- 
duced its first nuclear warheads.) In the course of 
this, and in preparation for an upcoming discussion 
with Israeli Prime Minister Golda Meir, Kissinger pro- 
vided a memorandum to the president that included 
in the "general intelligence judgment" the following: 
"There is circumstantial evidence that some fission- 
able material available for Israel's weapons develop- 
ment was illegally obtained from the United States by 
about 1965."^ 

This what-should-have-been stunning informa- 
tion— a clear reference to NUMEC — obviously came 
from Helms. Nixon does not appear to have reacted. 
Perhaps "some fissionable material" does not mean 
much coming out of the blue. Or perhaps acting on 
it would have interfered with his plans. He was in 
the midst of making a deal with Golda Meir in which 
he would stop the U.S. Government from bothering 
the Israelis about nuclear weapons, which they were 
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supposed to keep hidden. In return, he expected them 
to stand with him in the Cold War and especially in 
Vietnam, and to get U.S. Jews on board, too.^® So the 
NUMEC issue disappeared from sight. 

ISSUE REVIVED IN 1976 

The case got revived at the end of the Gerald Ford 
administration. This came after the U.S. Nuclear 
Regulatory Commission (NRC, of which I was then 
a member) asked the CIA to provide a briefing on the 
NUMEC affair. To everyone's surprise, CIA Deputy 
Director for Science And Technology Carl Duckett re- 
vealed that the CIA believed the missing HEU ended 
up in Israel. 

The White House took an interest in the case. On 
the basis of his review of the FBI's performance, U.S. 
Attorney General Edward Levi informed Ford that the 
FBI had never conducted: 

an investigation into the alleged discrepancy in nu- 
clear materials at NUMEC because it was advised by 
the AEC that any loss likely was attributable to inad- 
equate accounting procedures, and that there was no 
evidence or suspicion of a violation of law.^^ 

In short, the U.S. Government had never per- 
formed a thorough investigation of the loss of enough 
HEU for perhaps a dozen bombs. 

Levi listed several criminal statutes that might 
have been violated, including some that pointed to the 
possibility that federal officials concealed the events 
after the fact. He concluded: "I believe it necessary to 
conduct an investigation,"^® which he instructed the 
FBI to undertake. But Levi was soon out of office, as 
Jimmy Carter replaced Ford in the White House. 
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MARSH (FORD COUNSEL) TO WATSON 
(CARTER TRANSITION) 

During the transition, John Marsh, Counsellor to 
the President, discussed the NUMEC case with Jack 
Watson, the head of Carter's transition team.^^ In ear- 
ly-1977. Marsh sent Watson the following Top Secret 
documents in the case:^^ 

1. Helms' 2-page memo to the Attorney General 
(Clark), with transmittal cover, dated April 2, 1968; 

2. Photostat of 2-page letter from J. Edgar Hoover 
to Helms, dated September 3, 1969; 

3. Helms' 3-page letter to the President, dated Sep- 
tember 8, 1969; 

4. Internal 3-page memo from Duckett to Direc- 
tor of Central Intelligence dated March 21, 1976, 
with a 7-page Memorandum for the Record, dated 
March 9, 1972. 

These are still the key documents in the NUMEC 
case and still remain secret. Some information leaked 
out, and there was a brief flurry of interest in the 
press. CBS News reporter Mike Wallace even asked 
Israeli Prime Minister Menachem Begin about it in a 
60 Minutes interview (and, of course, got nowhere). 
The matter of Israelis stealing bomb material from 
the United States was an awkward one in the middle 
of the "peace process" and dribbled away. That was 
also the fate of the information about the 1979 Israeli 
nuclear explosion seen in the ocean off South Africa.^® 
The FBI continued to conduct interviews of former 
NUMEC employees, gathering some interesting infor- 
mation, but it all led nowhere. 
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WHAT DOES IT MEAN? 


Sometimes violators get away with it, even when 
detected, as all sorts of real world— bureaucratic, po- 
litical, and international — considerations intrude on 
the notion that, with only more and better intelligence 
and evaluation, we can develop a system of safeguards 
and response that will deter violations of agreements 
and laws that protect against proliferation. 

That is true, for example, if for the United States to 
respond vigorously to a violation would upset other 
international plans, as was the case in India. Imme- 
diately after the 1974 Indian bomb test, Henry Kiss- 
inger cabled the State Department from abroad with 
instructions not to issue a strong response, as it would 
interfere with his plans for dealing with Indian Prime 
Minister Indira Gandhi.^® From this, it was a short 
step for the State Department staff to conclude that it 
would not do to accuse India of violating a contract 
with the United States. 

It also helps a violator if he is seen as vital to car- 
rying out a core U.S. policy. That was the case with 
Pakistan in the 1980s, when Pakistan's assistance was 
seen by the United States as crucial to defeating the 
Soviets in Afghanistan. (And today, if a close and use- 
ful ally, say, such as Saudi Arabia, acted suspiciously, 
would we react as we do against Iran?) The case of 
North Korea illustrates that you can thwart enforce- 
ment in the wake of an NPT violation, anyhow for a 
number of years, if you can make a credible enough 
threat against the major countries involved. 

The Israeli situation is special. No other country 
can match the grip Israel has on U.S. domestic politics 
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or its ability to sway Congress. (The successful lobby- 
ing of the Indian American Council in connection with 
the 2008 U.S.-India nuclear agreement demonstrates 
that India is learning fast how to mobilize its U.S. 
diaspora.) 

To bring U.S. policy on Israeli nuclear weapons up 
to date, it is clear that the United States is not remotely 
ready to confront any possible Israeli wrongdoing in 
connection with its nuclear weapons. Our government 
is not even ready to confront the fact of Israel's nucle- 
ar weapons, even though every school child knows 
Israel has them. When newly elected President Barack 
Obama was asked at his first TV news conference in 
2009 whether he knew of any nuclear weapon states in 
the Middle East, he said he did not want to speculate.^® 
The official U.S. position on nonproliferation as it 
relates to Israel remains that the subject should not 
ever be discussed: At the IAEA Board of Governors 
Meeting in March 2013, under the heading, "Israeli 
Nuclear Capabilities and the Helsinki Conference on 
Establishing a Middle East WMD-Eree Zone," Ambas- 
sador Joseph Macmanus, the permanent U.S. Repre- 
sentative to the IAEA, stated: 

The United States regrets that the issue of Israeli nu- 
clear capabilities has once again been brought before 
the Board. Unlike other Member States whose nuclear 
activities are included on this Board's agenda, Israel 
has broken no agreements under the purview of the 
Agency 

The operative phrase is, of course, "under the pur- 
view of the Agency," which makes a fine distinction 
that keeps the statement just within the truth. But it 
also makes it difficult for the United States to be taken 
seriously by the international community when we 
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charge other, less friendly countries with violations of 
the NPT. 

Some of the events I described are decades old, but 
human nature has not changed. It suggests security of 
nuclear materials useful for bombs — against national 
appropriation or theft — is not entirely as advertised. 
More safeguards and intelligence and protection are 
not necessarily the whole solution. There remains 
the crucial element identified in the previously cited 
IAEA factsheet on proliferation; the "will of the inter- 
national community ... to take action." As we have 
seen, given the realities of world politics mixed with 
domestic considerations, that "will to take action" 
cannot be taken for granted, and neither can the effec- 
tive functioning of the entire international nonprolif- 
eration apparatus both within and outside the NPT. 
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CHAPTER 5 


THE NONPROLIFERATION REGIME 
AND ITS DISCONTENTS 

Leonard Weiss 

Why is it sometimes difficult to get the members 
of the United Nations (UN), whether states are par- 
ties to the Nuclear Nonproliferation Treaty (NPT) 
or otherwise, to enforce the international rules and 
norms designed to prevent the manufacture of nucle- 
ar weapons by nonweapon states? In Chapter 4, Vic- 
tor Gilinsky raises this question in the context of the 
theft of bomb-grade nuclear materials that went from 
the plant of a U.S. Navy contractor in Pennsylvania to 
Israel. He avers that the reluctance to enforce the rule 
of law stems from political considerations that render 
the nonproliferation regime much less effective than 
advertised. 

This conclusion should not be surprising, for po- 
litical considerations have surrounded the entire non- 
proliferation regime from its inception, including the 
creation of the International Atomic Energy Agency 
(IAEA) and its system of safeguards, of which more 
will be discussed later. But Gilinsky's complaint can 
be generalized, as he recognizes when he writes: "It is 
a familiar phenomenon in ordinary life that a friend 
of a violator of the law, or even a victim, is reluctant 
to report a crime. It also happens on an international 
level in dealings between states."^ 

The fact is that getting countries to act in the face 
of violations of signed agreements or agreed upon 
norms has been a problem whenever conflicting inter- 
ests come into play. A particularly egregious example 
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is provided by the reaction to Germany's violations 
of the Versailles Treaty that ended World War I. In 
1935, when Germany announced that its army would 
be based on compulsory national service, which was a 
clear violation of the treaty, Britain, France, and Italy, 
under the aegis of the League of Nations, held a con- 
ference at Stresa, Italy, to decide on a course of action. 
This resulted in a resolution opposing the unilateral 
repudiation of treaties, but as British Prime Minister 
Winston Churchill observed in his history of World 
War II; "... the British representative made it clear 
at the outset that they will not consider the possibil- 
ity of sanctions in the event of treaty violations."^ So 
Germany went its unmerry way, and the world lost 
an estimated 50 million people in the succeeding 
world war. 

A more direct forerunner of the enforcement prob- 
lem described in Chapter 4 occurred soon after World 
War II when the institutional arrangements that were 
negotiated for the UN required the existence of a veto 
in the Security Council precisely to prevent the impri- 
matur of the UN for actions deemed inimical to the in- 
terests of the five permanent members of the Security 
Council and their allies. When an attempt was made 
by the United States in its proposed 1946 Baruch Plan 
to block use of the veto in the case of nuclear related 
enforcement matters, the Soviet Union objected, and 
the attempt failed. Of course, the Baruch Plan was a 
transparent maneuver by the United States to achieve 
a propaganda victory over the Soviets in the early 
days of the Cold War and not a serious attempt to find 
a way to encourage nuclear development without 
spreading bomb technology. Its failure made it clear 
that enforcement of nuclear rules was going to have a 
hard road ahead. The prospects for nuclear develop- 
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merit, which seemed particularly bright in the after- 
math of U.S. President Dwight Eisenhower's "Atoms 
for Peace" speech, blinded the policymakers on all 
sides to the difficulties of creating and enforcing ef- 
fective rules that could prevent proliferation without 
impeding development. The early history of the IAEA 
and safeguards deliberations illustrate the problems 
at the heart of Gilinsky's thesis. 

The idea of an IAEA was born as part of President 
Eisenhower's Atoms for Peace speech on December 
8, 1953. The subsequent program that was given the 
name Atoms for Peace had a number of objectives. It 
was, among other things: a disarmament tool by vir- 
tue of the proposed establishment of a nuclear fuel 
bank that its proposer thought could have the effect of 
limiting or reducing the amount of fissionable mate- 
rial eligible for weapons; a marketing tool for creating 
and boosting a world demand for nuclear energy at 
a time when the United States was in the best posi- 
tion to profit from it both economically and politically; 
and a propaganda tool to divert attention away from 
the barbarity inflicted on Japan and the risk of a fu- 
ture nuclear holocaust in favor of presenting peaceful 
nuclear energy as a contribution to human society's 
technological and social betterment. 

In reality, the disarmament aspect of Atoms for 
Peace was illusory as it became clear that the amount 
of fissionable material in the world, including the 
Union of Soviet Socialist Republics (USSR), was so 
substantial that proposed contributions to a uranium 
bank would have no significant impact on weapons 
manufacture. Nonetheless, the United States was in- 
tent on promoting nuclear energy internationally, and 
the Soviets realized that such promotion had national 
security implications for themselves; therefore they 
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decided to participate in the development of any inter- 
national institution created to deal with peaceful nu- 
clear applications. The United States was unprepared 
for the Soviet decision and was surprised when the 
Soviets agreed to send a delegation to an international 
conference on nuclear energy planned for Geneva, 
Switzerland, in August 1955. The United States was 
further surprised when the USSR agreed to participate 
in the creation of the IAEA and a technical conference, 
following the large Geneva meeting, devoted to ex- 
ploring the subject of safeguards to prevent peaceful 
nuclear technology from leading to the proliferation 
of nuclear weapons. 

The Soviet decision to participate (just 2 weeks be- 
fore the conference opened) prompted a flurry of ac- 
tivity by the U.S. State Department to bring an Ameri- 
can position on safeguards to the technical meeting 
scheduled to follow the Geneva conference. The 
American delegation to the safeguards meeting was 
led by Isadore Rabi and attempted to develop a U.S. 
position over the 5 days that were available prior to 
the agreed-upon meeting. Little prior thinking about 
the subject had occurred beyond the notion of empha- 
sizing physical security of fissionable materials and 
detecting violations of rules created by the projected 
IAEA. It became apparent in the discussions among 
the Americans (in hotel room meetings at night) that 
the safeguards issue was complicated, difficult, and 
likely expensive. The American team settled on a pro- 
posal to assist material accounting with tagging fis- 
sionable material with a radioactive element, U-232, 
that would allow detection of the material in the plant. 
Material accounting would be accompanied by a sys- 
tem of physical security and inspection. The Soviets, 
led by Dmitri Skobeltsyn, were skeptical of the pro- 


78 


posal and pointed out some technical problems with 
the use of U-232 as a taggant that the United States 
had not taken into account. In addition, the U.S. team 
expressed a lack of confidence in the long-term viabil- 
ity of its own safeguards proposal. 

Following the safeguards meeting, and in advance 
of a meeting to draft the IAEA statute, the U.S. Atomic 
Energy Commission (AEC) created a task force to pro- 
duce ideas and studies for safeguards. It contracted 
with the Vitro Corporation to produce an engineering 
study of safeguards to allay the concerns expressed 
over the effectiveness of the American proposals. The 
Vitro study concluded that even with a 90 percent 
probability of detecting diversions of nuclear materi- 
als, it would be possible to divert enough plutonium 
for one bomb from a power reactor within a period 
of 5 years. This meant that safeguards would have to 
have a political and diplomatic component as well as 
a technological one. 

The task force concluded that Atoms for Peace 
might contribute to proliferation, that is, atoms-for- 
peace could lead to atoms-for-war. However, the AEC 
was not prepared to slow down, let alone abandon, the 
Atoms of Peace program. Although the agency explic- 
itly recognized that there was no diversion-proof safe- 
guards system, the commission supported taking the 
proliferation risks of going ahead with the program. 
The result was inevitable. The United States provided 
research reactors and training to dozens of countries, 
and some of them used the assistance to advance their 
interest in making nuclear weapons. India, Pakistan, 
and Israel all received assistance under Atoms for 
Peace. Much attention in recent years has been paid 
to the Iranian nuclear program and the concern about 
whether Iran is moving toward a nuclear weapon ca- 
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pability. Most of the stories do not mention that Iran's 
nuclear interest began in the late-1950s with a research 
reactor provided by the United States under Atoms 
for Peace. The cavalier attitude on safeguards at the 
beginning of the nuclear age has been matched by 
the attitude toward nonproliferation failures in more 
recent years. 

The failure to tie an effective safeguards system 
to earlier nuclear development was made manifest 
during negotiations on the extent of safeguards. For 
example, the question arose as to whether safeguards 
should be applied to source material. The United 
Kingdom (UK), Belgium, Canada, and Australia sup- 
ported this, but France and India were opposed. The 
opposition prevailed, making inventory accounting 
of source materials a purely voluntary activity. An- 
other issue was whether safeguards should apply to 
all nuclear states. India supported this, but the five 
permanent members of the Security Council (the P-5), 
wanted to exclude themselves from such a provision 
so they proposed that safeguards should attach only 
to those states that receive technical assistance from 
the IAEA, thereby leaving out the P-5. 

Finally, the issue arose as to whether there could 
be multilateral or alternative bilateral safeguards in 
lieu of international safeguards under the IAEA. The 
United States, realizing that it would take another 
few years to establish an international system and 
not wanting to wait for such a system to be put into 
place before engaging in nuclear trade, supported the 
notion of bilateral or multilateral safeguards in nu- 
clear transactions. Thus, when the European Atomic 
Energy Community (Euratom) was established, the 
United States supported Euratom' s desire for its own 
safeguards system, which undermined the authority 
of the IAEA system at the very beginning. 
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But this was not the only problem making it dif- 
ficult for safeguards to perform their stated function 
(deterring diversion via the risk of timely detection). 
Safeguards are still primarily focused on declared 
facilities. The additional protocol of the IAEA which 
allows, inter alia, for environmental monitoring, is 
meant to take care of this gap in coverage, but only 
about 60 percent of NET signatories have ratified it. 
Special inspections ostensibly can be used to investi- 
gate suspicious activity at a site, but inspectors require 
the cooperation of the state and, the threat of sanctions 
notwithstanding, are unlikely to be given access if in- 
spections would reveal a violation. 

Another problem in practice concerns the unreal- 
istic timeliness goal of the safeguards system. Mate- 
rial balances are done on a yearly basis, while diver- 
sions can occur at any time. This can be overcome by 
increasing the number of inventory takings, but that 
increases the cost and is resisted by plant operators. 

Finally, the official definition of a significant quan- 
tity (SQ) of highly enriched uranium (HEU) or plu- 
tonium (Pu) (that is, the amount of material needed 
to produce a nuclear explosion) is obsolete. For HEU, 
one SQ is defined as 25 kilograms, and for Pu, one SQ 
is 8 kilograms. Weapon states have produced working 
weapons with significantly smaller amounts of materi- 
als. Moreover, even considering the official numbers, 
in bulk handling plants processing large amounts of 
such materials, the minimum detectable diversion 
over a period in which a bomb can be constructed will 
exceed one SQ by far. 

In response to all these problems with safeguards, 
technical and institutional advances to prevent pro- 
liferation have been incorporated into the nonpro- 
liferation regime. Among these are near real time 
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accounting, the physical security convention, better 
intelligence and surveillance, the additional proto- 
col, export controls, and increased use of the Security 
Council to impose sanctions on violators. Ultimately, 
of course, the system depends on the willingness of 
countries to carry out enforcement actions to deal 
with safeguards violations or other violations of in- 
ternational norms, and this is central to the problem 
discussed in Chapter 4. 

Although Gilinsky mentions a number of cases 
where the United States failed to act appropriately 
upon knowledge of violations, his main focus is on the 
Nuclear Materials and Equipment Corporation (NU- 
MEC) affair in which Israel apparently and illegally 
received hundreds of kilograms of HEU from a U.S. 
Navy contractor in Apollo, PA. This was an egregious 
example of misfeasance by the U.S. Government. But 
equally bad is the example of Pakistan having obtained 
the means for making nuclear weapons that Gilinsky 
ascribes to a U.S. policy of "benign neglect" because 
of Pakistan's role in the Cold War. Neglect it certainly 
was, but there was nothing benign about it. During 
the most critical period of Pakistan's drive to obtain 
nuclear weapons in the 1980s, the executive branch 
of the U.S. Government got Congress to amend U.S. 
nonproliferation laws to allow economic and military 
assistance to Pakistan and then repeatedly ignored 
violations of the laws for the same purpose. 

Here is a list of the actions or nonactions taken 
by the U.S. Government that gave Pakistan the confi- 
dence that it had little to fear from U.S. nonprolifera- 
tion laws as long as the Cold War was still the primary 
focus of U.S. foreign policy and the Soviet invasion of 
Afghanistan was still ongoing: 
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1. In 1981, a new law was enacted, giving a 6-year 
waiver to Pakistan of the provisions of the Syming- 
ton Amendment to the Foreign Assistance Act. Paki- 
stan had previously been denied economic and mili- 
tary assistance under the amendment by importing 
unsafeguarded nuclear enrichment technology and 
equipment. The waiver allowed Pakistan to obtain a 
$3.2 billion aid package despite the continuation of its 
nuclear weapon acquisition activities. The waiver was 
extended a number of times until the Soviets began to 
leave Afghanistan in 1989. 

2. Agents for Pakistan repeatedly attempted to il- 
legally smuggle materials and components useful for 
the manufacture of nuclear weapons out of the United 
States, and were either not prosecuted or were allowed 
to leave the country without heavy penalty. 

a. In 1981, while an aid package for Pakistan 
was being considered by Congress, a Pakistani agent 
attempted to smuggle 5,000 pounds of zirconium for 
nuclear fuel rods out of the United States. The attempt 
was foiled by U.S. customs agents but had no effect on 
congressional passage of the aid. 

b. A Pakistani agent named Nazir Ahmed 
Vaid was arrested in 1984 for illegally attempting to 
export krytrons, which are used for nuclear triggers. 
Although the known intended recipient was the Paki- 
stan Atomic Energy Commission, the indictment was 
rewritten to exclude any mention of the nuclear use 
of krytrons. Vaid was permitted to plea bargain to a 
reduced offense, thus avoiding a jury trial, and a gag 
order on the case was issued by the judge. Vaid was 
found guilty of one count of an export violation and 
was quietly deported 3 weeks later. Although the case 
had no effect on U.S. aid to Pakistan, it did cause Con- 
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gress to pass the 1985 Solarz Amendment to the For- 
eign Assistance Act, which prohibited economic and 
military assistance to any country that illegally exports 
or attempts to export U.S. items that would contribute 
significantly to that country's ability to make a nuclear 
explosive device. 

c. In 1987, a Canadian citizen of Pakistani de- 
scent named Arshed Pervez was arrested for illegally 
attempting to buy and export a quantity of beryllium 
(used as a reflector in the core of nuclear weapons) 
along with 25 tons of maraging steel (a special steel 
used for constructing high speed centrifuges) from 
an American manufacturer. He was convicted of the 
beryllium charge and of lying to investigators but 
escaped conviction on the remaining charges on the 
grounds of entrapment even though American intel- 
ligence officials found evidence that he was working 
for a retired Pakistani brigadier general and that the 
final customer was the Pakistan nuclear program. 
This was a violation of the Solarz Amendment, but no 
sanction ensued. 

3. In 1985, the Pressler Amendment was signed 
into law, which made military assistance to Pakistan 
contingent on an annual certification by the president 
that Pakistan did not possess a nuclear explosive de- 
vice. Pakistan had the bomb by 1987, but the adminis- 
trations of U.S. Presidents Ronald Reagan and George 
H. W. Bush continued to make the determination that 
Pakistan did not possess a nuclear explosive device 
until 1990, when the last Soviet soldiers were leaving 
Afghanistan. 
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4. The sanctions visited on Pakistan following the 
reimposition of the Symington and Glenn Amend- 
ments, as well as the application of the Pressler 
Amendment, did not last long once the U.S. concern 
about the Soviets was replaced by the specter of Is- 
lamic terrorists after September 11, 2001. When the 
United States decided to wage war in Afghanistan and 
needed the help of the Pakistan Inter-Services Intelli- 
gence agency (ISI) to do so, the nonproliferation laws 
were again altered or replaced so that Pakistan could 
receive its desired arms shipments. The nuclear tests 
carried out by Pakistan (and India) in 1998 made no 
difference, as the United States continued to change 
its laws for Pakistan's (and India's) benefit. Even the 
rise of the infamous A .Q. Khan network that spread 
nuclear bomb material manufacturing technology 
to many countries, including Iran and North Korea, 
made no difference. 

The characterization of the U.S. attitude toward 
the Pakistani nuclear program during these years is 
more accurately called "supine indulgence" rather 
than "benign neglect." It has provided the two cur- 
rent bites noire of the United States in nuclear matters, 
Iran and North Korea, with the ability to claim that 
U.S. oppositional rhetoric to their programs on the 
grounds of principle constitutes hypocrisy. That is not 
to say that they have no fear of U.S. military action. 
Quite the contrary; but all parties understand that if 
it comes to that, it will not be primarily in defense of 
nonproliferation norms, although that is how it may 
be advertised. Rather it will be in support of the main- 
tenance of regional U.S. power and influence against 
the survival and regional power ambitions of Iran in 
the Middle East and North Korea in East Asia. 
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It is frequently said, usually by people with a par- 
ticular fondness for realpolitik, or who have a foreign 
policy axe to grind on behalf of a client, country, or 
industry that is behaving badly on nuclear issues, that 
U.S. interests in nonproliferation cannot be allowed 
to supersede broader U.S. national interests (defined 
by them as helping said client, country, or industry). 
Such philosophy relegates nonproliferation policy to a 
contingency to be exercised when convenient to do so. 
It is another version of the old saw that says nations 
do not have permanent friends or enemies, only per- 
manent interests, which in this case excludes nonpro- 
liferation except in special circumstances. And there 
is no question, when examining the U.S. record (not 
just the rhetoric of its leaders), that the United States 
has yet to see nonproliferation as a permanent inter- 
est transcending alliances and ideology. Regardless of 
whether this as a good thing or a bad thing, it cannot 
be expected that other nations will be persuaded to 
view the issue differently, and that leads to the prob- 
lems with the nonproliferation regime, including the 
one encapsulated in the title of Chapter 4. 
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CHAPTER 6 


CAN THE IAEA SAFEGUARD 
FUEL-CYCLE FACILITIES? 

THE HISTORICAL RECORD 

Alan J. Kuperman 
David Sokolow 
Edwin S. Lyman 

INTRODUCTION 

The peaceful use of nuclear power is premised on 
an international ability to prevent bomb-grade nuclear 
materials from going missing from civilian fuel-cycle 
facilities. This depends crucially on "safeguards" ad- 
ministered by the International Atomic Energy Agen- 
cy (IAEA), which are supposed to detect any clandes- 
tine removal of a bomb's worth of fissile material (or 
more) in time to prevent it from being manufactured 
into one or more nuclear weapons. Unfortunately, 
more than 4 decades after the creation of IAEA safe- 
guards, considerable doubt remains as to whether the 
agency can attain this goal even at the relatively small 
number of existing fuel-cycle facilities, let alone at 
the many more such facilities envisioned as nuclear 
power expands globally. 

Accordingly, this chapter assesses the current and 
anticipated efficacy of IAEA safeguards at civilian fu- 
el-cycle facilities (also known as "bulk handling facili- 
ties") and then formulates policy recommendations. 
The chapter starts by detailing the empirical record of 
safeguards shortfalls at such facilities. Second, it ex- 
plains the two major risks of clandestine removal of 
fissile material from fuel-cycle facilities: diversion by 
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states, or theft by sub-state insiders. Third, it details the 
scope of such facilities worldwide. Fourth, the chap- 
ter discusses the technical and political obstacles to 
achieving safeguards objectives, and various propos- 
als to overcome them. Finally, the chapter concludes 
with policy recommendations based on the current 
and projected capabilities of IAEA safeguards.^ 

EMPIRICAL RECORD 

Nuclear fuel-cycle facilities around the world, in 
states with and without nuclear weapons, have suf- 
fered accounting discrepancies entailing many bombs' 
worth of fissile material. This section first explores the 
record at such facilities in two nuclear-weapons states: 
the United Kingdom (UK) and France. Second, it illus- 
trates the inadequacy of accountancy at such facilities 
under IAEA safeguards in two countries with varying 
levels of cooperation with the agency: Japan and Iran. 

United Kingdom. 

British Nuclear Fuels Limited's (BNFL) Sellafield 
site in northwest England includes a mixed-oxide 
(MOX) fuel facility, which operated from 2001 to 
2011, as well as the Thermal Oxide Reprocessing Plant 
(THORP) that continues to operate. In 2005, an audit 
of the nuclear materials at the MOX facility revealed 
that the "material unaccounted for" (MUF) was 29.6 
kilograms (kg) of plutonium, or roughly 3.5 "signifi- 
cant quantities" (SQ) of this fissile material, enough 
for several nuclear weapons. BNFL insisted that the 
figure did not mean that any material had been re- 
moved without authorization from its plants. The 
company asserted that its techniques to account for 
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nuclear material followed internationally approved 
and recognized best practices. In particular, BNFL 
contended that the systems of statistical measurement 
and control at THORP were "the most advanced in the 
world. However, on May 9, 2005, a BNFL inquiry re- 
vealed that a massive leak at THORP had gone unde- 
tected for 9 months. The leak occurred in a feed pipe 
to one of the two accountancy vessels, resulting in ac- 
cumulation of 83.4 cubic meters of dissolver solution. 
This solution contained an estimated 19 metric tons of 
uranium and 190-kg of plutonium.^ An accountancy 
tank is where the initial inventory of fissile material 
is measured for the purpose of establishing shipper- 
receiver differences (SRD). But the system failed to de- 
tect the increasing loss of material until 8 months after 
it began. To the credit of the plant's material account- 
ing system, the first indications of the problem came 
not from any safety detectors (several of which were 
malfunctioning), but from the company's Safeguards 
Department, when it observed an anomalous SRD in 
March. Despite that, the leak was not uncovered until 
a month later. 

In BNFL's review of the incident, the company 
commended the role of its Safeguards Department 
in detecting the leak, although acknowledging that 
the Nuclear Materials Accountancy system had not 
provided timely warning of lost material. The system 
"is intended to provide overall accountancy balanc- 
es," and "is not designed to (nor is it intended that it 
should) be responsive to track material on a more real 
time basis." Later, BNFL recommended the introduc- 
tion of "a nuclear tracking regime . . . with the objective 
of promptly detecting primary containment failure 
or misdirection of material."^ This statement appears 
puzzling since BNFL had previously made claims. 
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with the full support of the European Atomic Energy 
Community (Euratom), proclaiming the existence of 
near-real-time accountancy (NRTA) at THORP. Eor 
example, in a paper delivered at an IAEA safeguards 
symposium in 2001, a joint BNFL-Euratom team 
stated that: "Near Real Time Materials Accountancy 
(NRTMA) is fully operational in THORP, providing 
regular assurance of high quality material control."^ 
In retrospect, this claim appears to have been exagger- 
ated, at the least. 

At the time of the incident, the plant was under 
Euratom safeguards. This institution has identical 
timeliness criteria as the IAEA for uncovering diver- 
sions of nuclear material (e.g., the detection of one SQ 
of direct-use fissile material within 1 month). How- 
ever, Euratom failed to detect the MUE despite having 
access to the operators' accountancy records, as well 
as supposedly having access to process data, upon 
which it performed its own statistical tests.® Neither 
the plant operators nor the Euratom inspectors suc- 
cessfully detected the leak or sounded an alarm for 8 
months — many times longer than the timely warning 
requirement. This incident suggests that even state-of- 
the-art safeguards cannot come close to satisfying the 
IAEA's explicit standards for detecting missing fissile 
material before it could be fabricated into a weapon. 

France. 

Along similar lines to the BNEL incident, the 
now closed MOX fuel facility in Cadarache, France, 
which operated under Euratom safeguards, encoun- 
tered MUE situations twice during the last decade. 
This facility was operated from 1961 to 2004 by Co- 
gema and then by Areva, which acquired Cogema. In 
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2002, the Euratom Safeguards Agency reported that 
"the annual verification of the physical inventory at 
Cogema-Cadarache plant in France found an unac- 
ceptable amount of material unaccounted for (MUF) 
on the plutonium materials [SIC]."^ The problem was 
later attributed to the differences between measure- 
ment techniques by inspectors and operators, and to 
poor definitions of materials in historical accounting 
records. (If the latter were the issue, it is unclear why 
the MUF problem would not have arisen until 2002.) 
In September 2004, it was reported that Euratom fi- 
nally had responded to Cogema's explanation of the 
2002 MUF finding.® Thus, it took at least 2 years to 
resolve the discrepancy. Despite this explanation, the 
problems at the facility persisted. 

In October 2009, the French Nuclear Safety Author- 
ity ordered the halt of decommissioning operations at 
the facility. When the facility had closed in 2004, its 
former operator, Areva, estimated that there would 
be a MUF of approximately 8-kg of plutonium due to 
holdup in the plant's gloveboxes — which are shielded 
hot cells along the process line in which technicians can 
remotely manipulate the nuclear material. However, 2 
weeks into the cleanup of the facility, the French Atom- 
ic Energy Commission announced that it had already 
collected 22-kg and projected that the total might rise 
to 39-kg of MUF.^ While the plutonium holdup might 
have accumulated in the gloveboxes over a long peri- 
od of time, Areva' s underestimation of the amount by 
almost five SQs suggests that the plant's accounting 
system failed and that the Euratom safeguards were 
insufficient to detect the potential diversion of several 
bombs' worth of fissile material. The repeated failure 
of safeguards in nuclear-weapons states to meet the 
IAEA detection standards, despite employing some 
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of the most advanced accounting technologies in the 
world, raises serious questions about whether IAEA 
safeguards can achieve their objectives. 

Japan, 

Japan has boasted that it cooperates fully with the 
IAEA and applies the world's most advanced safe- 
guards. Despite that, three of its fuel-cycle facilities 
have suffered substantial accountancy failures. This 
record raises serious concerns about the ability of safe- 
guards to detect the diversion of fissile materials in a 
timely manner in any country. 

At the Plutonium Euel Production Facility (PFPF), 
a MOX fuel plant at Tokai-mura, the problem of resid- 
ual holdup led to a significant material accountancy 
failure. Soon after the plant started up in 1988, opera- 
tors noticed the problem of plutonium becoming stuck 
in gloveboxes. In response, the plant operator, Japan's 
Power Reactor and Nuclear Fuel Development Corpo- 
ration (PNC), in conjunction with safeguards experts 
at the U.S. Los Alamos National Laboratory, designed 
a nondestructive assay (NDA) method to measure 
residual holdup in situ — that is, without dismantling 
the hot cells — known as the Glovebox Assay System 
(GBAS). However, the system's imprecision contrib- 
uted to an overall measurement uncertainty of about 
15 percent. 

By 1994, the plant's MUF had grown to about 69-kg 
of plutonium. Because of the measurement uncertain- 
ty associated with the GBAS, even if the entire MUF 
were residual holdup, the IAEA could not exclude 
the possibility— with a confidence level of 95 percent, 
based on NDA measurements alone — that at least one 
SQ had been diverted. Consequently, the IAEA want- 
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ed PNC to cut open the plant's gloveboxes, remove 
the holdup directly, and measure it with destructive 
assay methods. PNC balked at this request, and the 
dispute remained unresolved until the Nuclear Con- 
trol Institute — a Washington-based, nonproliferation 
advocacy group — publicly disclosed the existence of 
the discrepancy in 1994. After that disclosure, PNC 
agreed to shut down the plant, recover the holdup, 
install new equipment to reduce further holdup accu- 
mulation, and implement improved NDA systems to 
measure more accurately any future residual holdup. 
After an expenditure of $100 million to remove and 
clean out old gloveboxes and install new ones, PNC 
announced in November 1996 that it had reduced the 
MUF to less than 10-kg (but not less than one SQ). This 
partial resolution of the MUF issue took more than 
2 years from the time the situation became public, 
which contrasts starkly with the IAEA's timely warn- 
ing standard of 1 month for such fissile material that 
can be used directly to make a nuclear weapon. 

Another long-unresolved MUF issue at Tokai was 
associated with the accumulation of plutonium-laden 
fuel scrap resulting from decades of MOX research 
and production activities at the site.^° Press reports 
in the mid-1990s indicated that the scrap inventory 
at Tokai contained between 100- and 150-kg of pluto- 
nium.^^ However, much of this scrap was in an impure 
form that could not be accurately measured via NDA 
methods. An NDA instrument known as the Pluto- 
nium Scrap Multiplicity Counter (PSMC), developed 
by Los Alamos, was relatively effective for measuring 
pure scrap plutonium but much less so if the mate- 
rial was contaminated with moisture or light elements 
that could generate neutrons through (a,n) reactions. 
For heavily contaminated scrap, the measurement im- 
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precision ranged from 10 to 50 percent, well above the 
4 percent uncertainty cited by the IAEA as the interna- 
tional standard for scrap measurements^^ Even with 
the PSMC's best case of 10-percent average impreci- 
sion, the uncertainty associated with measuring a scrap 
inventory containing 150-kg of plutonium would be 
greater than one SQ. Indeed, more than six SQs would 
have to be diverted to yield a 95 percent chance of de- 
tecting a diversion. Accordingly, the IAEA wanted the 
plant operator, PNC, to chemically purify the scrap 
and then use destructive assay to measure the pluto- 
nium more precisely. In 1998, the IAEA announced a 
formal agreement under which PNC would embark 
on a 5-year program "aimed at reducing the inven- 
tory of heterogeneous scrap material," which would 
be "gradually homogenized to allow enhanced veri- 
fication, including destructive analysis. No further 
information appears to be available on the status of 
this program, except for a brief mention in the IAEA 
2000 Safeguards Statement of a containment and sur- 
veillance approach for the receipt and storage of MOX 
scrap at the "Solution Critical Facility" in Japan.^^ 

The older reprocessing plant at Tokai also has suf- 
fered substantial material accountancy failures due to 
measurement and estimation errors, since it began op- 
erating in 1977. In January 2003, Japan admitted that 
the cumulative shipper-receiver difference — that is, 
the amount of plutonium that was estimated to have 
been shipped to the reprocessing plant in spent fuel 
minus the amount of separated plutonium that had 
actually been measured— was 206-kg, or about 25 
SQs. This was nearly 3 percent of the total plutonium 
estimated to have been processed in the plant over its 
lifetime. A few months later, Japan revised its figures, 
claiming that the actual discrepancy was only 59-kg, 
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because the remainder was either bound in the hulls of 
the spent fuel's cladding (12-kg), had been discarded 
with high-level liquid waste (106-kg), or had decayed 
into americium-241 (29-kg). However, it was unclear 
how figures as precise as these were derived, given 
the uncertainties inherent in measuring the plutonium 
in cladding hulls and in high-level waste, and in as- 
sessing the isotopic content of the spent fuel prior to 
reprocessing. 

Japan's newest fuel-cycle facility is the larger, 
Rokkasho-mura Reprocessing Plant, which is now 
scheduled to commence commercial operations in 
2016. Starting in the 1990s during design and con- 
struction, there was a massive multinational effort to 
develop and implement a state-of-the-art safeguards 
system at Rokkasho. Unfortunately, issues of cost and 
convenience played a major role in development of 
the safeguards approach and resulted in many ques- 
tionable compromises. For instance, instead of having 
its own, independent, on-site analytical laboratory, 
the IAEA must share a laboratory with the facility op- 
erator, which raises the potential for tampering. 

The IAEA itself admits that, after 15 years of design- 
ing the safeguards approach, the detection goals still 
cannot be met at the facility. In 2006, Shirley Johnson, 
the former head of the Rokkasho safeguards project in 
the IAEA's Department of Safeguards, acknowledged 
that even if the overall measurement uncertainty were 
between 0.7 and 0.8 percent at Rokkasho, the system 
could not come close to the detection goal of one SQ.^® 
In a 2009 report for the International Panel on Eissile 
Materials (IPFM), Johnson reiterated the continu- 
ing problems in reducing measurement uncertainty, 
and called for complementary measures to address 
the concern; 
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For a large facility like the Rokkasho Reprocessing 
Plant, which has an annual throughput of 800 tons 
of spent fuel containing about 1 percent plutonium 
(about 8,000-kg), a 1-percent uncertainty translates 
into an overall measurement uncertainty of 80 kilo- 
grams plutonium— 10 significant quantities. For this 
reason, the IAEA requires added assurance by addi- 
tional measures. Many of these could be carried out 
during short-notice random inspections.^^ 

Unfortunately, such complementary measures 
have not yet been implemented. Nor have NRTA tech- 
nologies solved the problem. Recent results from the 
performance of NDA solution monitoring systems at 
Rokkasho indicate that they also have high measure- 
ment uncertainty. For instance, it was reported that 
the Plutonium Inventory and Management System 
(PIMS), which is designed to perform assays on rela- 
tively pure plutonium and uranium mixtures, has a 
total measurement uncertainty of 6 percent (+/-).^^ 
Although Japan sometimes blocks intrusive mea- 
sures, claiming proprietary concerns, the IAEA has 
never accused the country of doing so out of an inten- 
tion to divert fissile material. Indeed, it is despite Ja- 
pan's apparent good-faith efforts to cooperate with the 
IAEA that its state-of-the-art safeguards have proved 
inadequate. As a result, the IAEA does not have high 
confidence that it could give timely warning of a po- 
tential diversion of enough fissile material for one or 
more nuclear weapons. 

The shortcomings of safeguards are still greater 
in countries that withhold full cooperation from the 
IAEA and may have proliferation aspirations, such as 
Iran. As noted by the team that developed the safe- 
guards approach for Rokkasho, "The most important 


factor leading to the success" of a safeguards system 
is "the open and full cooperation between all par- 
ties— the IAEA, the State, and the operator."^® Thus, 
even potential future enhancements of safeguards 
would likely fall short if there were an uncooperative 
or adversarial relationship between these parties. This 
is a crucial consideration as the IAEA and the world 
consider the expansion of nuclear power and fuel-cy- 
cle facilities to states with uncertain commitments to 
nuclear nonproliferation. 

Iran. 

Since 2003, the IAEA and international community 
have become increasingly concerned that Iran may 
use its enrichment technologies to produce highly en- 
riched uranium for a nuclear weapon. To date, Iran 
generally has enriched no higher than to 20 percent at 
its three declared enrichment facilities (except for one 
small batch that inexplicably was enriched to around 
27 percent),^® and mostly to only about 4 percent. Os- 
tensibly, the 20-percent enrichment is for research-re- 
actor fuel, and the 4-percent enrichment is for power- 
reactor fuel, although none of this uranium has yet 
actually been used as fuel. 

Several experts have analyzed how quickly Iran 
could achieve a "breakout" by enriching sufficient 
highly enriched uranium (HEU) for a nuclear weapon. 
In October 2012, the Institute for Science and Interna- 
tional Security assessed "that Iran would require at 
least 2-4 months to produce one SQ of WGU [weap- 
ons-grade uranium] at the Natanz Fuel Enrichment 
Plant," the largest of its three such facilities, if it started 
from its then existing stocks of low-enriched uranium. 
The report added that "the quickest estimates are 2 


99 


to 2.3 months."^® Similarly, a Nonproliferation Policy 
Education Center (NPEC) report, published a month 
earlier, examined the breakout potential if Iran used 
all three of its enrichment facilities and concluded that 
"The total time required is 73 days, which is about 10 
weeks or a little less than 21/2 months."^^ 

At the moment, IAEA inspections should be able 
to detect such an attempted breakout at a declared Ira- 
nian facility because "currently, inspections occur on 
average about once every 2 weeks, and some of them 
are unannounced."^^ But if Iran expands the number 
of its centrifuges and attempts to implement next-gen- 
eration centrifuges, the required time for a breakout 
would shrink substantially. For example, according 
to the NPEC report, if Iran expanded its number of 
centrifuges by 12 times —without any improvement in 
technology and starting only from its stock of 4 percent 
low enriched uranium (LEU) rather than its 20 percent 
enriched stock — "these enrichment facilities could 
produce enough HEU for a nuclear weapon in just 2 
weeks."^^ At that point, the IAEA's current schedule 
of safeguards inspections could not guarantee timely 
warning against a diversion of sufficient HEU for a 
nuclear weapon, even if Iran used only its declared 
enrichment facilities. An additional danger is that Iran 
could pursue a breakout at a clandestine enrichment 
facility, which current IAEA safeguards might not 
detect. As the IAEA conceded in August 2012; 

While the Agency continues to verify the non-diver- 
sion of declared nuclear material at the nuclear facili- 
ties and LOFs [locations outside facilities] declared by 
Iran under its Safeguards Agreement, as Iran is not 
providing the necessary cooperation, including by not 
implementing its Additional Protocol, the Agency is 
unable to provide credible assurance about the ab- 
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sence of undeclared nuclear material and activities in 
Iran, and therefore to conclude that all nuclear mate- 
rial in Iran is in peaceful activities.^^ 


Suspected diversion from Iranian nuclear facilities 
is not merely hypothetical. The IAEA has reported ac- 
counting discrepancies at a separate Iranian nuclear 
facility, the Jabr Ibn Hayan Multipurpose Labora- 
tories (JHL).2® In 2011, the IAEA conducted a physi- 
cal inventory verification at JHL "to verify, inter alia, 
nuclear material, in the form of natural uranium metal 
and process waste, related to conversion experiments 
carried out by Iran between 1995 and 2002."^® This in- 
spection revealed a discrepancy of 19.8-kg between the 
amounts of nuclear material declared by the operator 
and measured by the agency. Subsequently, in August 
2012, after additional analysis and evaluation of clari- 
fications provided by Iran, the agency reported that it 
had been able to reduce the discrepancy, and would 
continue to work with Iran to resolve the remainder.^^ 
As of the time this chapter was written in early-2013, 
however, the discrepancy had yet to be fully resolved, 
more than a year after it was originally discovered. 
This does not bode well, especially if Iran continues to 
expand its nuclear fuel-cycle facilities. 

TWO RISKS: DIVERSION AND THEFT 

Civilian nuclear fuel-cycle facilities present two 
risks of clandestine removal of fissile material: diver- 
sion by states or theft by sub-state insiders for crimi- 
nal or terrorist purposes. In both cases, the adequacy 
of safeguards is critical to providing the international 
community with timely warning to prevent the re- 
moved material from being fabricated into one or more 


101 


nuclear weapons. The fundamental goal of IAEA safe- 
guards is to establish an accounting regime capable 
of reliably providing timely warning of the suspected 
clandestine removal of as little as one bomb's worth of 
fissile material, thereby helping to deter and prevent 
such an outcome. (This chapter does not cover the 
risks of overt attacks by sub-state actors on fuel-cycle 
facilities or shipments, or overt proliferation by states 
at formerly civilian facilities, which must be addressed 
by other national and international countermeasures.) 

The potential for diversion and/ or theft of bomb- 
usable nuclear material is present at three types of 
fuel-cycle facilities: (1) uranium enrichment, (2) repro- 
cessing, and (3) MOX fuel fabrication. As explained 
later, these plants pose different vulnerabilities be- 
cause of the different forms of fissile material that they 
routinely process. 

Civilian enrichment facilities typically use centri- 
fuges or other technologies to increase the percentage 
of the fissile U-235 isotope in uranium from its natu- 
ral level of 0.7 percent to typically about 4 percent for 
use in the fuel elements of nuclear power plants. This 
output is known as "low enriched uranium," mean- 
ing less than 20 percent U-235, which is considered 
unsuitable for weapons. Civilian facilities typically 
do not produce "highly enriched uranium" (HEU) — 
meaning 20 percent or more U-235 — which is consid- 
ered necessary for weapons. Thus, the primary prolif- 
eration risks at civilian enrichment facilities are that 
the state could either (1) clandestinely produce and 
remove HEU, or (2) divert LEU to another facility not 
under safeguards for further enrichment. 

Reprocessing facilities take the irradiated "spent" 
fuel that is removed from nuclear power plants and 
extract its plutonium (and uranium) for potential in- 
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corporation into fresh MOX fuel to be irradiated in 
nuclear power plants. The separated plutonium poses 
a major security risk because it can be fabricated di- 
rectly into a nuclear weapon. Typically, such facilities 
contain plutonium in the form of oxides and other 
chemical mixtures that can either be used directly to 
make less efficient weapons or converted to metal for 
improved efficiency. 

MOX fuel fabrication facilities take the plutonium 
oxide from reprocessing plants and mix it with ura- 
nium oxide to fabricate mixed-oxide fuel for nuclear 
power plants. MOX plants pose several security 
risks. Most obviously, they contain large amounts of 
separated plutonium oxide that can be used to make 
nuclear weapons. But even after the plutonium is 
combined with uranium to make bulk mixed-oxide 
material, and subsequently fabricated into MOX fuel, 
significant risk continues because the plutonium ox- 
ide can be separated out via chemical processes that 
are relatively straightforward. (This is much easier 
than reprocessing because the fuel is fresh and thus 
not highly radioactive.) 

SCOPE OF THE FACILITIES 

The countries of main focus are those that have 
signed the Nuclear Nonproliferation Treaty (NPT) as 
non-nuclear weapon states, whose fuel-cycle facilities 
are subject to IAEA safeguards. But the chapter also 
discusses such facilities in nuclear-weapon states and 
in states that have not signed the NPT, as these plants 
may also offer some important lessons, especially if 
they are under stringent commercial safeguard re- 
gimes comparable to those of the IAEA. 
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Approximately 25 nuclear fuel-cycle facilities are 
operating in the world, with others proposed or tem- 
porarily closed, as detailed later. In 2012, there were 
18 civilian enrichment plants operating, and three 
more were planned in 11 countries. Table 6-1 indicates 
their location, name, operational status, opening year, 
safeguards status, and capacity. Five commercial re- 
processing facilities were operating, one was tempo- 
rarily closed, and one was preparing to start up (see 
Table 6-2). 
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Country 

Facility Name 

Operational 

Status 

Opening Year 

Sateguards 

Capacity 

[tSWU/yr] 

Argentina 

Pilcaniyeu 

Operating 

2010* 

Yes 

20-3,000 

Brazil 

Resende 

Operating 

2005 

Yes 

115-120 

China 

Shaanxi 

Operating 

1997 

Yes 

1,000 


Lanzhou II 

Operating 

2005 

Offered 

500 


Lanzhou (new) 

Operating 

2005 

Yes 

500 

France 

Georges Besse II 

Operating 

2011 

Yes 

7,500-11,000 

Germany 

Gronau 

Operating 

1985 

Yes 

2,200-4,500 

Iran 

Natanz 

Operating 

2004 

Yes 

120 


Qom 

Operating 

2012 

Yes 

5 

Japan 

Rokkasho 

Operating 

1992 

Yes 

1,500 

Netherlands 

Memo 

Operating 

1973 

Yes 

5,000-6,000 

Russia 

Angarsk 

Operating 

1954 

Offered 

2,200-5,000 


Novouralsk 

Operating 

1945 

No 

13,300 


Zelenogorsk 

Operating 

2009 

No 

7,900 


Severs k 

Operating 

1950 

No 

3,800 

United Kingdom 

Capenhurst 

Operating 

1972 

Yes 

5,000 

United States 

Paducah, 

KY 

Shutdown 

proposed 

1954 

Offered 

11,300 


Piketon, Ohio 

Planned 

2013? 

Offered 

3,800 


Eunice, NM 

Operating 

2010 

Offered 

5,900 


Areva Eagle Rock, 
Idaho 

Planned 

Postponed 

Offered 

3,300-6,600 


Global Laser 
Enrichment, Wilm- 
ington, NC 

Planned 

2013 

? 

3,500-6,000 


Sources: Nuclear Fuel Cycle Information System, Vienna, Aus- 
tria: IAEA, available from infcis.iaea.org/NFCIS/NFCISMain.asp? 
Order=l&RPage=l&Page=l&RightP=List; and Global Fissile Ma- 
terials Report 2011, Princeton, NJ: International Panel on Fissile 
Materials, p. 32. 

Table 6-1. Civilian Enrichment Facilities, 
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Country 

Facility Name 

Operationai 

Status 

Opening 

Safeguards 

Capacity 

(tHM/yr) 

China 

Lanzhou Piiot Piant 

Operating 

2001 

No 

50-100 

France 

Areva La Fiague UP2 

Operating 

1996 

Yes 

1,000 


Areva La Fiague UPS 

Operating 

1990 

Yes 

1,000 

Japan 

Rokkasho 

Starting Up 

2007 

Yes 

800 


Tokai 

Temporariiy 
Shut Down 

1977 

Yes 

200 

United 

Kingdom 

B205 

To be ciosed 
after cieanup 

1964 

Yes 

1,500 


THORP 

Operating 

1994 

Yes 

1,200 


Sources: Nuclear Fuel Cycle Information System, Vienna, Aus- 
tria: IAEA, available from infcis.iaea.org/NFCIS/NFCISMain.asp? 
Order=l&RPage=l&Page=l&RightP=List; and Global Fissile Ma- 
terials Report 2011, Princeton, NJ: International Panel on Fissile 
Materials, p. 33. 

Table 6-2. Civilian Reprocessing Plants, 

As for MOX fabrication facilities, in the wake of the 
UK's 2011 announcement that its plant would close, 
only three commercial facilities — one each in France, 
Japan, and Russia — are currently in operation. Three 
more are planned to open during the next 4 years in 
Japan, Russia, and the United States (see Table 6-3). Ja- 
pan Nuclear Fuel Ltd. had originally planned to open 
the Rokkasho-mura MOX plant in 2015, but the 2011 
Fukushima nuclear disaster delayed construction on 
the facility by a year.^® In Russia, the Mining & Chemi- 
cal Combine plans to open a MOX facility at Zhelezno- 
gorsk in 2014. The U.S. MOX fuel facility at Savannah 
River will use plutonium from disassembled nuclear 
warheads and is scheduled to start operations in 2016 
and begin producing commercial fuel in 2018.^® 
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Country 

Facility Name 

Operational 

Status 

Opening 

Safeguards 

Capacity 

(tHM/yr) 

France 

MELOX-Marcouie 

Operating 

1995 

Yes (Euratom) 

195 

Japan 

Tokai 

Operating 

2007 

Yes 

10 


Rokkasho 

Pianned 

2016 

Yes 

130 

Russia 

Mayak - Paket 

Operating 

1980 

No 

5 


Zheieznogorsk 

Pianned 

2014 


60 

United 

States 

Savannah River 

Pianned 

2018 


100 


Sources: Nuclear Fuel Cycle Information System, Vienna, Austria: 
IAEA, available from infcis.iaea.org/NFCIS/NFCISMain.asp?Order= 
l&RPage=l&Page=l&RightP=List, and "Mixed Oxide Fuel," Lon- 
don, UK: World Nuclear Association, available from www.world- 
nuclear. org/info/infl 9.html . 

Table 6-3. Civilian MOX Fuel Facilities. 


TECHNICAL AND POLITICAL CHALLENGES 

The nonproliferation community has been aware 
for decades of the technical and political challenges 
facing safeguards. In 1990, Dr. Marvin Miller of the 
Massachusetts Institute of Technology (MIT) pub- 
lished a seminal paper, "Are IAEA Safeguards on 
Bulk-Handling Facilities Effective?" highlighting 
these challenges. Despite some progress over the past 
2 decades, many of the challenges that Dr. Miller high- 
lighted in 1990 still persist. 

IAEA safeguards for nuclear facilities were de- 
signed with the objective of detecting with timely 
warning the diversion of a significant quantity of fissile 
material. An SQ is the "approximate amount of nucle- 
ar material for which the possibility of manufacturing 
a nuclear explosive device cannot be excluded."^® In 
other words, an SQ is the estimated minimum amount 
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of uranium or plutonium (or other exotic fissile mate- 
rial) that a state or nonstate actor would need to build 
a nuclear weapon. 

Depending on the type and form of fissile material, 
the IAEA guidelines adjust the amount that qualifies 
as an SQ and the deadline for timely warning. For un- 
irradiated, direct-use nuclear material, an SQ is de- 
fined as 8-kg of plutonium, or 25-kg of U-235 in HEU, 
and timely warning is defined as 1 month after an 
abrupt diversion (or 1 year after the start of a gradual 
diversion). In 1975, the Standing Advisory Group on 
Safeguards Implementation (SAGSI) was established 
as a group of external experts appointed by the IAEA 
Director General to provide feedback on safeguards 
standards, among other functions. 

Material accountancy is how the IAEA aims to 
detect the diversion of nuclear material at civilian 
fuel-cycle facilities. This is analogous to an audit. Op- 
erators of nuclear facilities prepare a material balance 
for a specific period of time showing that all nuclear 
material can be accounted for. To prepare this bal- 
ance, the operators add material inputs — and subtract 
removals— from the quantity indicated at the start of 
the accounting period, yielding an amount that should 
match the ending physical inventory. The IAEA per- 
forms an independent assessment on at least some of 
the data provided by the facility operator to verify 
that there has not been any deliberate falsification of 
data.®^ 

Discrepancies between the operator's final physi- 
cal inventory and the amount that its records indicate 
should be present are labeled MUF. Such discrepan- 
cies can arise from problems such as accumulation of 
residual holdup in the process lines, accumulation of 
scrap and waste materials in other material forms that 
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are hard to assay, inaccuracies in nuclear material es- 
timation methods, operator incompetence, diversion, 
or theft. MUF is often caused by residual holdup, re- 
sulting from the adhesion of fissile-material powders 
on process equipment, including in cracks, corners, 
and pores. Because of the layout and design of fuel- 
cycle facilities, these MUFs can grow over time and 
may only be resolved by dismantlement and careful 
clean-out. Unless and until the source of the MUF can 
be identified, it is impossible to rule out the possibil- 
ity of diversion or theft, which poses a dilemma. If 
inspectors declare a possible theft or diversion, it may 
well be a false alarm. But if they refrain from doing so 
for fear of a false alarm, it may be impossible to satisfy 
the IAEA's timely warning criteria. 

False alarms thus pose a serious quandary for 
safeguards. The SAGSI guidelines recommend that 
safeguards be stringent enough to provide at least a 
90 to 95 percent probability of detecting a diversion 
with a false alarm rate of less than 5 percent. Some 
critics have argued that this detection probability is 
too low, because it permits a 5 to 10 percent chance of 
a diversion going unnoticed. But merely raising the 
probability of detection, if all else remains equal, will 
also increase the false-alarm rate. Such increases in 
false alarms are a nuisance and impose costs by inter- 
rupting facility operations. Moreover, based on past 
experience, high false-alarm rates may spur opera- 
tors to ignore alarms or even switch off the detection 
systems, thereby perversely reducing the probability 
of detection. 

Unfortunately, real-world detection probabilities 
at fuel-cycle facilities are even lower than recommend- 
ed by SAGSI. The IAEA has acknowledged that it can- 
not meet the goal of a 90 to 95 percent probability of 


109 


detecting the diversion of an SQ. So, instead, the IAEA 
adopted a relaxed standard known as the "accoun- 
tancy verification goal" (AVG), which was "based on 
a realistic assessment of what then-current measure- 
ment techniques could actually detect," according to 
a U.S. congressional report.^^ In other words, rather 
than designing safeguards to meet the desired de- 
tection standard, the IAEA instead has lowered that 
detection standard, so it could be satisfied by current 
safeguards. 

The AVG is based on a measure called E, defined 
as the "minimum loss of nuclear material which can 
be expected to be detected by material accountancy," 
which varies depending on a facility's input, among 
other factors. The formula for E was derived from the 
joint requirements of a 95 percent confidence of de- 
tecting a diversion and a 5 percent false-alarm rate. 
Eor a large reprocessing facility, based on an input 
uncertainty of 1 percent (+/-) and an annual input of 
800 metric tons of heavy metal (spent fuel), the value 
for E would be 246-kg of plutonium, or more than 
30 SQs. In other words, there would be less than a 
95 percent probability of detecting a diversion of 30 
bombs' worth of plutonium. Any smaller diversion 
would have an even lower probability of detection. In 
particular, the probability of detecting the diversion 
of a single SQ — enough for a nuclear weapon— would 
be minimal. 

Despite technological advances in monitoring and 
accounting systems since 1990, large MUEs have oc- 
curred repeatedly at facilities with lAEA-quality safe- 
guards, as detailed earlier. These failures have arisen 
both in non-nuclear weapons states, subject to IAEA 
safeguards, and in nuclear weapons states subject to 
analogous domestic regulations. 
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PROPOSED IMPROVEMENTS 


For at least 3 decades, nonproliferation experts 
have outlined theoretical proposals for improving 
safeguards. But practical obstacles, including pro- 
prietary concerns, have prevented their thorough 
implementation. In his 1990 paper. Miller focused on 
three areas: 

1. Reducing measurement uncertainty in the 
chemical process area. Unfortunately, no progress is 
apparent in this realm. As of 2001, the IAEA's "expect- 
ed measurement uncertainty" associated with closing 
a material balance at a reprocessing plant remains at 1 
percent.^® Miller reported the same value in 1990. 

2. Near-real-time accountancy on a weekly basis 
to improve the detection of protracted, low-level 
diversion. In NRTA, inventories are taken and mate- 
rial balances closed on a much more frequent basis 
than the conventional annual physical inventory. For 
instance. Miller showed that the threshold for detec- 
tion of an abrupt diversion of one SQ of plutonium 
at a fuel-cycle facility could be accomplished by use 
of NRTA with physical inventories conducted on a 
weekly basis. However, given that the time to take a 
physical inventory of a large facility is approximately 
1 week— including preparation time, cleanout of pro- 
cess of equipment, measurement of the inventory, and 
reconciliation of the anomalies — such a high frequen- 
cy of physical inventories is impractical.®^ Therefore, 
NRTA must resort to nondestructive assay measure- 
ments of in-process materials where possible, and its 
effectiveness will depend in large part on the uncer- 
tainties associated with these measurements. A major 
question is whether NDA techniques have improved 
over the past 22 years to the extent that the benefits of 
NRTA can be fully realized. 
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3. Reducing measurement error of plutonium in 
the waste stream, such as in cladding hulls and slud- 
ges. Over the past decade, Los Alamos National Labo- 
ratory and other labs have explored ways to improve 
the capabilities of NDA instruments for waste mea- 
surements. The development of neutron multiplicity 
counters and high-efficiency epithermal neutron coun- 
ters showed some promise in improving the precision 
of measuring plutonium in waste drums. However, 
these instruments do not perform well when mea- 
suring low-assay, contaminated, and heterogenous 
plutonium materials — as is typical in waste streams. 

A holistic approach to reducing measurement un- 
certainties is known as safeguards by design (SBD). 
Under SBD, future civilian nuclear fuel-cycle facilities 
would be designed, constructed, and operated in a 
manner to incorporate the most advanced technology 
and systems to enforce IAEA safeguards. Proponents 
of SBD assert that this approach can: 

ensure the timely, efficient, and cost effective integra- 
tion of international safeguards and other nonprolif- 
eration barriers with national material control and ac- 
countability, physical protection, and safety objectives 
into the overall design process for a nuclear facility.^® 

But the future viability and success of SBD de- 
pends upon developing better monitoring and accoun- 
tancy equipment, reducing the costs associated with 
these new designs and technologies, and alleviating 
proprietary concerns. 

While such technical solutions could in theory en- 
hance IAEA safeguards, proprietary and sovereignty 
concerns have hindered their implementation. States 
and nuclear firms have been reluctant to allow the 
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IAEA access to the design, construction, and opera- 
tion of their fuel-cycle facilities because they fear loss 
of intellectual property. For example, in 2004, Brazil 
initially prevented IAEA officials from inspecting 
equipment at the Resende enrichment facility, in order 
to protect proprietary information. When the IAEA 
inspectors arrived at the plant, they discovered that 
large portions of it were behind walls and coverings.®^ 
Later in 2004, Brazil and the IAEA did reach an agree- 
ment to allow the inspectors to visit the site.^^ Howev- 
er, this incident demonstrates that even countries that 
have abandoned their pursuit of nuclear weapons and 
are responsible, active members of the international 
community (such as Brazil) are reluctant to provide 
the IAEA with unrestricted access to commercial fuel- 
cycle facilities due to proprietary concerns. 

Other countries, such as Iran, may be hesitant to 
comply with the IAEA so that they can maintain their 
weapons option. Such countries may fear that the IAEA 
would provide detailed information about their facili- 
ties to their enemies. Top Iranian officials express this 
fear. For example, then-Iranian President Mahmoud 
Ahmadinejad labeled the head of the IAEA a puppet 
of the United States, and he accused the IAEA of mak- 
ing "illegal requests" during its inspection efforts.^® 
In September 2012, the head of Iran's Atomic Energy 
Organization, Feyerdoon Abbasi-Davan, claimed that 
"terrorists and saboteurs might have intruded the 
agency and might be making decisions covertly."^® 
Despite nominally placing all of its nuclear facilities 
under a safeguards agreement, Iran continues to deny 
the IAEA unfettered access to all of its nuclear-related 
facilities. 

Given the limitations of safeguards, the IAEA in- 
creasingly has relied during the last 2 decades on com- 
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plementary measures of containment and surveillance 
(C/S), especially seals and cameras. For example, re- 
processing plants have begun to utilize seals on their 
tanks containing liquid plutonium nitrate, which is 
an interim form of the material during the plant's op- 
eration, in order to detect unauthorized withdrawals. 
Some reprocessing plants also have installed cameras 
to monitor the spent fuel pool and the transfer of spent 
fuel to the chop-leach cell to detect efforts to divert for 
clandestine reprocessing. Unfortunately, many parts 
of a reprocessing plant cannot be monitored with 
cameras or seals, because of the myriad pipes, valves, 
pumps, and tanks. Thus, although C/S measures are a 
useful complement to safeguards, they are no substi- 
tute for better accounting measures, such as NRTA.^° 
In 1997, due to concern about clandestine facilities, 
the IAEA introduced an additional protocol, which it 
aimed to negotiate with each state already subject to 
a comprehensive safeguards agreement. This would 
provide the IAEA "complementary access ... to as- 
sure the absence of undeclared nuclear material and 
activities."^^ To induce states to sign the additional 
protocol and to save money, the IAEA also introduced 
the concept of integrated safeguards. Under this ap- 
proach, the agency relaxes the inspection require- 
ments at declared facilities, on grounds that its "state- 
level" approach can detect any nondeclared facilities 
where diverted material would need to be further pro- 
cessed for a nuclear weapon. The state-level approach 
depends on factors such as the state's own domestic 
accounting mechanisms and its willingness to accept 
remote monitoring and short-notice random inspec- 
tions.^^ As the agency explains: 
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when the IAEA has drawn a conclusion of the absence 
of undeclared nuclear material and activities in that 
State . . . [accountancy] measures may be applied at 
reduced levels at certain facilities, compared with the 
measures that would have been applied without this 
conclusions^ 

SAGSI concluded in 2004 that such "Safeguards Cri- 
teria were basically sound,"^ and in 2010, the IAEA 
reported that 47 states had implemented integrated 
safeguards.^® 

But serious questions have been raised about 
whether integrated safeguards are an adequate sub- 
stitute for facility-level accounting. The approach de- 
pends on high confidence that the IAEA can detect all 
clandestine facilities in a country and that fissile mate- 
rial cannot be diverted to a second country for pro- 
cessing, both of which are questionable assumptions.^® 
Some aspects of the state-level approach are laudable, 
including less predictable inspections and aiming to 
discover clandestine facilities, but these should not 
come at the expense of watering down facility-level 
safeguards. Otherwise, integrated safeguards could 
wind up weakening, rather than strengthening, pro- 
tections against misuse of fissile material. 

Some nuclear security advocates, such as the IPFM, 
have proposed new ways to monitor fuel-cycle facili- 
ties in nuclear- weapons states — as would be required 
under a proposed Fissile Material Cut-Off Treaty 
(FMCT)— which might also be applicable at some fa- 
cilities subject to IAEA safeguards.^® To reduce costs 
of monitoring under an FMCT, an IPFM report in 2009 
suggested that IAEA timeliness requirements could 
be relaxed in return for new verification and monitor- 
ing tools and methods, which it said would result in 
"only a relatively moderate increase in measurement 
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uncertainties."^® For example, at operating commer- 
cial facilities, the report recommended short-notice 
random inspections rather than continuous inspector 
presence.®® 

While IAEA safeguards are an international audit 
mechanism, analogous domestic measures are gener- 
ally known as state systems of accounting and control 
(SSACs), which help monitor nuclear materials in a 
country and may provide the framework for the ap- 
plication of safeguards under an agreement between 
the state and the IAEA. These agreements include, but 
are not limited to, protocols for measurement systems 
to determine quantities of nuclear material and pro- 
cedures governing the taking of a physical inventory. 
The IAEA does not have formal authority to address 
subnational threats, such as theft by workers at a facil- 
ity ("insiders"). But improving SSAC to help the IAEA 
detect diversions by the state can also provide the op- 
erator an enhanced capability to detect diversions by 
sub-state insiders.®^ Unfortunately, additional aspects 
of domestic security that are important in counter- 
ing internal threats, such as access authorization pro- 
grams, remain out of the IAEA's formal domain, even 
under the provisions of the 2005 amendment to the 
Convention on Physical Protection of Nuclear Mate- 
rial which, in any case, has not yet entered into force. 
This distinction between state and nonstate actors is 
artificial when their interests are intertwined, so it 
may hinder efforts to build comprehensive systems 
to effectively ensure that civil nuclear facilities do not 
become covert sources of fissile material for states or 
subnational groups. 

Domestic authorities also are responsible for 
"physical protection," which seeks to detect and pre- 
vent loss of nuclear material in real time, in contrast to 
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accountancy that can only detect it after the fact. Many 
of the technological aspects of physical protection are 
known as material control and accounting (MC&A), 
which comprises aspects of safeguards, in addition to 
containment and surveillance. At fuel-cycle facilities, 
MC&A includes but is not limited to locks, fences, 
walls, gates, and badging systems. It also may in- 
corporate interior and exterior sensors such as video 
cameras and motion detectors to prevent outsiders 
from breaking in or insiders from gaining access to 
sensitive areas and materials, and to improve response 
time to alarms. Such systems also may monitor pedes- 
trian and vehicle exits to detect attempts to remove 
materials.^^ Beyond MC&A— which comprises these 
technological approaches to detection, deterrence, 
and prevention of nuclear theft — physical protection 
programs also include additional response and deter- 
rence elements, including armed forces. 

CONCLUSION 

Theoretical solutions to improve IAEA safeguards 
have been discussed for decades. However, propri- 
etary, economic, and sovereignty concerns have lim- 
ited the extent to which countries and private com- 
panies have implemented these theoretical solutions. 
Even in states that cooperate with the IAEA and apply 
sophisticated accounting mechanisms, such as Japan, 
safeguards at fuel-cycle facilities currently cannot 
come close to achieving their explicit goal of providing 
timely warning of a suspected diversion of one bomb's 
worth of fissile material. The prospects are even worse 
in states that resist cooperation and may wish to keep 
open their weapons option, such as Iran, and at facili- 
ties that employ first-generation safeguards. 
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If the prospect of an undetected diversion or theft 
of fissile material is unacceptable to the international 
community, then it is imprudent to permit the con- 
struction of additional nuclear fuel-cycle facilities, 
or expansion of existing ones, especially in states of 
proliferation concern, unless and until safeguards can 
be substantially upgraded to meet the international 
community's explicit detection goals. Considerable 
resources should be devoted to research and devel- 
opment of such improvements. But if past experi- 
ence is any indicator, significant progress is unlikely 
to occur anytime soon. That stubborn reality should 
inform nuclear policy decisions. Most importantly, 
it suggests that the international community should 
postpone consideration of expanding the recycling of 
spent nuclear fuel, because that would require addi- 
tional reprocessing and MOX fuel fabrication facilities 
that cannot now be safeguarded adequately against 
diversion or theft for nuclear weapons. 
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CHAPTER 7 


REVIEW OF "CAN THE IAEA SAFEGUARD 
FUEL-CYCLE FACILITIES? 

THE HISTORICAL RECORD" 

Ryan A. Snyder 

In Chapter 6, "Can the IAEA Safeguard Fuel-Cycle 
Facilities? The Historical Record," Alan Kuperman, 
David Sokolow, and Edwin Lyman provide a remind- 
er of safeguarding challenges at fuel-cycle facilities by 
citing material accountancy failures at such facilities 
in England, France, Japan, and Iran. The known tech- 
nical challenges of meeting the International Atomic 
Energy Agency (IAEA) safeguards objective are dis- 
cussed, but many of the examples and much of the 
surrounding discussion reveal that limitations to safe- 
guarding efforts are not merely technical. There are 
human factors that likely contributed to the material 
accountancy failures over months or years, as well 
as IAEA credibility considerations that probably de- 
layed disclosures of material diversions. In addition, 
the technical challenge is greater than discussed, as 
nuclear weapons with sizeable yields can likely be 
manufactured with less material than was assumed. 

Two examples of missing material that Kuperman, 
Sokolow, and Lyman cite are the 22 tons of uranium 
and 160 kilograms (kg) of plutonium found miss- 
ing in 2005 at the Thermal Oxide Reprocessing Plant 
(THORP) in England, and the 206-kg of plutonium 
that was reported missing in 2003 at the Tokai repro- 
cessing plant in Japan. It is tempting to claim that the 
IAEA simply lacks the capabilities to measure such 
diversions, but the amount of material missing in 
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both cases suggests that either the measurement er- 
rors are much higher than claimed in the 2001 IAEA 
Safeguards Glossary or that no measurement or inex- 
cusably few measurements were made until other sig- 
nals alerted inspectors or operators to large amounts 
of missing material. It should be mentioned here that 
even though the IAEA was not responsible for safe- 
guarding the THORP, there is no reason to assume 
that the technical capabilities of those responsible at 
the Euratom Safeguards Agency should have differed 
markedly from those at the IAEA. 

The 206-kg found missing at Tokai was about 
3 percent of the total plutonium processed over the 
plant's lifetime since 1977. The expected error for such 
a measurement at a reprocessing facility is about 1 
percent, according to the IAEA.' While the percent of 
total throughput of the uranium and plutonium found 
missing at the THORP is not listed, the size of the leaks 
were almost certainly higher than 3 percent of total 
plant throughput between the roughly 8 months from 
the start of the leak to its discovery. 

It is necessary here to mention what the IAEA says 
must be measured to have the required confidence that 
a material diversion has occurred. Any scientific mea- 
surement must have some uncertainty, so there is al- 
ways some chance that a quantity is actually higher or 
lower than the number measured. This amount higher 
or lower divided by the measured value is called the 
measurement error, and the IAEA expresses this as 
a percentage. The IAEA also wants to be about 90-95 
percent confident that, in fact, a measured material 
diversion has occurred, and this translates into need- 
ing measurements to differ from the original amount 
by 3.3 multiplied by the measurement error to claim 
this level of confidence. This rule is derived from ba- 
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sic statistics to reflect the IAEA's stated 90-95 percent 
confidence standard. 

Knowing this, 3.3 times the expected error of 1 per- 
cent is 3.3 percent, which translates into an amount 
that is a bit higher than the 206-kg missing at Tokai 
when considering the total plant throughput. It is 
tempting to think that 206-kg of plutonium missing 
from a reprocessing facility could go undetected if it is 
only 3 percent of the total; it would not signal the 90- 
95 percent confidence needed for the IAEA to claim a 
diversion. However, if measurements with uncertain- 
ties of 1 percent were taken on multiple occasions over 
the life of the plant and if material equal to 3 percent 
of the throughput was indeed missing, statistics indi- 
cates that diversions over 3.3 percent of the through- 
put would still occasionally be measured and signal 
the necessary confidence to claim a diversion. The 
Tokai example suggests that either the measurement 
errors were not accurate to 1 percent or that measure- 
ments were not taken frequently enough to discover 
that material was missing. 

Another way of thinking about such an idea is to 
consider counting out 100 pennies to make one dollar. 
If the measurement error here is 1 percent, it is expect- 
ed that the total number of pennies counted would be 
between 99 and 101 most of the time. Now if a child 
entered the room and took three of the pennies with- 
out your knowledge, recounting them after the child's 
theft would most often give counts between 96 and 98. 
A count of 96 reflects a diversion equal to 4 percent of 
100 and would exceed the minimum 3.3 percent dif- 
ference needed to be confident that there has been a 
diversion. The important fact is that measurements 
with 1 percent error would sometimes create the ap- 
pearance that four of the pennies are missing when 
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only three have been stolen. This applies analogously 
to the missing 3 percent of plutonium from Tokai; fre- 
quent measurements would occasionally result in di- 
versions appearing to exceed 3.3 percent. The statistics 
of 1 percent measurements demand such outcomes. 

The accountancy failure at Tokai is explained by 
human errors and not measurement limitations. Ei- 
ther the IAEA does not know what the standard errors 
are in measuring equipment used around the world, 
or it is claiming greater precision than the instruments 
have; an additional possibility is that users of the 
equipment do not know how to use it. It is also pos- 
sible that no or very few measurements were taken, 
which adds another element into safeguarding efforts. 
Perhaps inspectors with high confidence in the opera- 
tors at a particular plant or inspectors safeguarding 
plants located in countries deemed unlikely to divert 
material for use in a nuclear weapon will be more like- 
ly to skip material accountancy measurements. When 
so much material is found missing in the examples 
Kuperman, Sokolow, and Lyman cite from Tokai and 
THORP, the questions raised go beyond the IAEA's 
technical capabilities. 

Additional human factors need to be considered 
in discussions about the IAEA's credibility related 
to false alarms or claims of a diversion when, in fact, 
none has occurred. The IAEA aims to keep this below 5 
percent, which statistical calculations show is the pre- 
viously mentioned standard of at least 3.3 multiplied 
by the measurement error. This consideration can be 
understood in the following way: If 20 measurements 
are made that meet the IAEA's threshold for diver- 
sion, one of those measurements is statistically likely 
to be false. 
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It is important to be aware of the problems the 
IAEA might encounter upon falsely claiming that a 
diversion has occurred. The agency is only able to do 
its work if it receives cooperation from states and if 
it made a claim that turned out to be false, coopera- 
tion in implementing safeguards might disappear. A 
state could say the IAEA was pressured by the United 
States so it could claim it has nuclear weapons ambi- 
tions and is interested in rallying international opin- 
ion for economic sanctions or military action against 
it. Future collaborative efforts between states and the 
IAEA could be in jeopardy, and the loss in trust from 
such an event could be a major setback. 

Even though the chance of false alarms is a quan- 
titatively expressed measurement, the political factors 
in bringing a claim of material diversion are highly 
relevant and add a challenging layer to safeguarding 
efforts. Any measure of material diversion with the re- 
quired confidence will likely be repeatedly examined 
before a claim is brought against a state; the under- 
standable risks of being wrong would likely demand 
it. This process will take time and, in the real event 
that material has been diverted, provide a state with 
additional time to build a nuclear weapon. A state 
could also say that the IAEA is mistaken or that it 
needs to check its own records to resolve the account- 
ing discrepancy. This could delay any punitive action 
and buy yet more time. 

Such factors could also lead states to conclude 
that diversions into nuclear weapons should be at- 
tempted with well-prepared excuses in preparation 
for the IAEA raising alarms. A state might calculate 
that it could divert material only to wait and see if 
the IAEA detects it. If the IAEA sounds an alarm, a 
state could attempt to creatively smooth over the dis- 
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crepancy and resolve it without fear of consequence. 
If the IAEA misses the diversion, then a state could 
proceed through the remaining clandestine steps to a 
bomb with greater confidence. That states consider- 
ing the manufacturing of nuclear weapons will almost 
certainly give more thought into how to build them 
without detection than those trying to stop them raises 
the possibility that the IAEA is never likely to detect a 
material diversion it could confidently say was made 
for inclusion in a nuclear weapon. At least it seems 
unlikely, given the IAEA's constraints. 

It is not unreasonable to ask whether the human 
factors in safeguarding efforts will always remain 
considerable limitations, no matter what improve- 
ments are made in measurement precision. The up- 
grades that Kuperman, Sokolow, and Lyman propose 
for safeguards would indeed be improvements, but 
they are all aimed at improving measurement er- 
ror. Although vitally important, one must wonder 
whether any claimed improvements are indeed real 
and whether, if real, they would significantly improve 
efforts at meeting the IAEA's safeguards objective, 
which is: 

the timely detection of diversion of significant quanti- 
ties of nuclear material from peaceful nuclear activi- 
ties to the manufacture of nuclear weapons or of other 
nuclear explosive devices or for purposes unknown, 
and deterrence of such diversion by the risk of early 
detection.^ 

Might timely detection always be impossible when 
considering a state determined to build a nuclear 
weapon as quickly as possible upon diversion from 
a fuel-cycle facility? Improved measurement accu- 
racy might provide greater confidence that, indeed. 
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some material is missing, but what are the limitations 
of such improvements? How much increased confi- 
dence is possible as a result? Should the human fac- 
tors already discussed weigh more heavily — or per- 
haps dominantly — in considerations of safeguarding 
limitations? 

The one quantitative definition that Kuperman, 
Sokolow, and Lyman did not discuss in enough detail 
was the definition of a significant quantity (SQ). The 
IAEA defines a significant quantity as "the approxi- 
mate amount of nuclear material for which the pos- 
sibility of manufacturing a nuclear explosive device 
cannot be excluded."^ Kuperman, Sokolow, and Ly- 
man use the IAEA's definition of 8-kg for a significant 
quantity of plutonium-239 (Pu-239), but this amount 
has been challenged as too large, given the informa- 
tion now publicly available about nuclear weapons 
design. This is an important oversight, as the effec- 
tiveness of a safeguards system depends on whether 
a diverted SQ can be detected, and the need to detect 
smaller quantities would place increased demands on 
safeguarding efforts. Most importantly, however, the 
IAEA's definitions in this regard are extraordinarily 
irresponsible if sizeable nuclear weapons can be built 
with smaller amounts of material than what the IAEA 
has defined as its concern. The question of whether it 
is possible to detect a diversion with the required con- 
fidence and raise a claim that the requisite material for 
a nuclear weapon is missing must meet a whole new 
standard. Such an error raises questions about how 
the IAEA views its role if it accepts the shortcomings 
of its own definitions. 

The U.S. Department of Energy (DOE) has con- 
firmed that 4-kg is sufficient for building a nuclear de- 
vice in the case of Pu-239 and uranium-233 (U-233),'' 
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and others have suggested that only 1-kg can be used 
for these isotopes.^ This shows that 8-kg should be 
considered too large. The relevant assumption here is 
that materials for neutron reflecting and compression 
techniques are accessible by non-nuclear weapons 
states for making sizeable bombs with less material. 

Leaving aside the omission about significant quan- 
tities, Kuperman, Sokolow, and Lyman do lay out the 
technical challenges in safeguarding these facilities, 
challenges that guarantee many kinds of diversions 
by determined proliferators would go undetected. 
Nowhere, however, might the technical capabilities of 
the IAEA prove less relevant than in the case of Iran 
and the current state of its nuclear program. The dan- 
ger Iran presents is the advancement of its program 
under IAEA safeguards, thereby shortening the time 
needed for acquiring the requisite material for a nu- 
clear weapon. With recent hopes for diplomatic prog- 
ress in curtailing the program notwithstanding, Iran's 
program reveals a limitation to safeguards no matter 
the current capabilities or prospective improvements 
in them. Although analysts differ slightly in how 
much time Iran might need to acquire the material 
for one bomb (usually assumed to be 20- to 25-kg of 
U-235), continued enrichment of uranium to 3.5 per- 
cent and acquisition of additional centrifuge capacity 
could very shortly, if it has not already, make the time 
needed for assembly of a nuclear weapon so short that 
detection of a material diversion for bomb assembly 
could not prevent one from being built. This judgment 
holds important implications for the future of nuclear 
proliferation, as states learn they are able to come so 
close under IAEA safeguards to a nuclear weapon that 
the world has no choice but to act as if they have one. 
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This raises the question of whether it will become 
increasingly futile to focus on improving the ability 
to detect a material diversion from a fuel-cycle facil- 
ity. The lower political and economic costs of pursu- 
ing nuclear weapons under the guise of a safeguarded 
civilian nuclear power program, where a state can 
be assisted in the effort from international suppli- 
ers or may be increasingly able to build the needed 
fuel-cycle technologies indigenously, suggest that the 
United States needs to define what it considers unac- 
ceptable along the spectrum of nuclear capability with 
regard to the fuel cycle. To draw the line at proscrib- 
ing an Iranian nuclear weapon— as the United States 
may argue — would prove unmanageable. Once the 
requisite amount of material is produced, construct- 
ing and equipping a warhead is a relatively short 
and technologically straightforward process, almost 
certainly impossible to detect in a timely fashion. Not 
until a more effectual standard — and the credibility to 
enforce it — has emerged should improvement in the 
IAEA's abilities be regarded as helpful in preventing 
the manufacture of a bomb. 

Kuperman, Sokolow, and Lyman have certainly 
provided a message that the nonproliferation com- 
munity needs to hear more often, that the current 
technical capabilities of the IAEA make safeguarding 
fuel-cycle facilities very challenging. The bad news is 
that human factors and their interaction with these ca- 
pabilities, as well as the inability of the United States 
to define what is unacceptable nuclear capability, 
make success in safeguarding less likely than even 
they suggest. 
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CHAPTER 8 


DISMANTLING THE SOUTH AFRICAN 
NUCLEAR WEAPONS PROGRAM: 
LESSONS LEARNED AND QUESTIONS 
UNRESOLVED 

Jodi Lieberman 

INTRODUCTION 

Reducing and ultimately eliminating nuclear 
weapons has been made a centerpiece of the Barack 
Obama administration. However, doing so requires 
sustained diplomatic engagement with other nuclear 
weapons states and, more importantly, effective veri- 
fication and confidence-building measures to ensure 
the drawdown is transparent, verifiable, and irrevers- 
ible. But, it would also be important to ensure that 
non-nuclear weapons states do not harbor a "bomb 
in the basement." Specifically, how might one verify 
that states that have previously developed a nuclear 
weapons program or produced weapons-usable mate- 
rial have properly declared them and given them up? 
History has shown that, while critical to nonprolifera- 
tion efforts, the International Atomic Energy Agency 
(IAEA) is no match for a country intent on building 
a nuclear deterrent, even in the face of international 
enmity. It would therefore be instructive to look to 
previous examples in which a country accumulated 
significant nuclear "know-how," a deterrent, or weap- 
ons-usable material to identify any precedents and 
what they might suggest. 

In the annals of history, there is only one coun- 
try that has developed a nuclear weapons program. 
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a limited nuclear deterrent, and then dismantled that 
program and declared it for international inspection: 
South Africa. Between the 1960s and 1989, South Africa 
developed a limited nuclear deterrent and then opted 
to dismantle that deterrent, decommission its nuclear 
weapons complex, down-blend its nuclear weapons 
fissile material, come clean to the international com- 
munity, and accede to the Nuclear Non-Proliferation 
Treaty (NPT) as a non-nuclear weapons state. For 
many, this was seen by the international community 
as an extraordinary turn of events, and South Africa 
has been lauded for these efforts. However, a deeper 
examination of the South African case raises a number 
of outstanding questions that beg the question of just 
how irreversible and transparent the South African 
disarmament was and how this might complicate cur- 
rent "getting to zero" efforts. 

For example, before then-South African President 
F. W. de Klerk disclosed the nature of his country's 
nuclear deterrent, the program had been fully dis- 
mantled and upwards of 12,000 documents associ- 
ated with the program destroyed. While some have 
noted that this was done to ensure that the incoming 
African National Congress (ANC) government was 
unable to access nuclear weapons know-how, the 
document destruction leaves a significant gap in what 
the world knows about the South African nuclear 
program 20 years hence. In addition, when IAEA in- 
spectors examined the remains of the South African 
weapons program and attempted to verify how much 
weapons-usable highly enriched uranium (HEU) was 
produced, they were stymied by the significant mate- 
rial imbalances. 

While inspectors claim they were able to recon- 
cile those imbalances to within an acceptable level of 
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confidence, the question remains as to how acceptable 
that level of confidence is and whether there are un- 
explained imbalances that remain. These unresolved 
questions and our limited ability to answer them 20 
years later suggests that actions should be taken to 
clarify the record regarding the South African pro- 
gram and to provide critical lessons as the United 
States pursues global nuclear weapons disarmament. 

DETERMINING HISTORICAL PRODUCTION: 
WHY? 

While the move was considered a beacon of trans- 
parency, it is curious that de Klerk ordered the whole- 
sale destruction of all documentation relevant to the 
nuclear weapons program before the IAEA had a 
chance to verify anything. He clearly knew that, to 
have credibility, the IAEA would have to be called in 
to verify the dismantlement and that this would re- 
quire documentation. If the country really wanted to 
be transparent, then all relevant records for the enrich- 
ment facility would have had to be retained so that 
the IAEA could determine exactly how much HEU 
was produced. In fact, there was an IAEA safeguards 
team in South Africa when de Klerk made his big 
announcement. 

According to the inspection team that led the 
verification process, there were a lot of unknowns, 
including being faced with a fuel cycle of indigenous 
origin, more than 20 years of enrichment activity, and 
unaccounted-for tails material that the South African 
government did not bother to measure. Even Waldo 
Stumpf, who actually ran the Atomic Energy Corpora- 
tion of South Africa (AEC), has stated that: 
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. . . the verification of the HEU output of the pilot en- 
richment plant against the natural uranium inputs, de- 
pleted uranium outputs and in-process losses posed 
a particularly difficult problem as far more U-235 is 
present in the more than 270 depleted UF6 cylinders 
than HEU2 

Why would Stumpf, who presumably was privy to 
all the relevant details of the fuel cycle as head of the 
AEC, declare that the verification process was chal- 
lenging? Did the South Africans keep poor records? 
Did Stumpf believe that full dismantlement of the 
nuclear weapons facilities before the IAEA could 
get to them was a bad idea but was unable to say so 
publically? 

It is also notable that, prior to the 1993 disclosure, 
the South African government used extensive cover 
stories and a deception plan to ensure that the IAEA, 
other governments, and the public were unable to dis- 
cover the real nature of its "civilian" nuclear program. 
Those cover stories were used even while the IAEA 
was on the ground at the time of the de Klerk disclo- 
sure; AEC employees were instructed to lie to inspec- 
tors about various undeclared facilities that the team 
observed while there. So, it is questionable the extent 
to which the government was able to gain any cred- 
ibility with the IAEA inspectors, having previously 
lied to them, in the aftermath of the big reveal. Further, 
any calculations about production and existing stocks 
of HEU in the public domain were done by extrapola- 
tion and assumption. Even the U.S. intelligence agen- 
cies were unable to verify the amount of material the 
South African government had in its complex. 

To complicate matters, the IAEA will not disclose 
information about inspections in any member state; 
the information is deemed "safeguards confidential." 
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This is done to protect the nuclear expertise and the 
security of the country as well as the credibility of the 
IAEA to be an objective arbiter. Given the public nature 
of the South African disclosure, it is unclear if member 
states received a classified briefing to provide the de- 
tails of the South African nuclear weapons program. It 
may have been left to the host country to make inspec- 
tion information public, if at all. But, in the more than 
20 years since its nuclear program was dismantled, 
the South African government has yet to disclose how 
much weapons-grade material it produced or where it 
came from, whether any of that technology or exper- 
tise was gained as the result of outside assistance, and 
exactly what became of the HEU. 

After the 1993 disclosure, speculation was rife as to 
how much HEU its enrichment facility has produced. 
At the time, the South African government did not 
publically reveal how much HEU it had produced 
or that it had on hand, saying that not doing so was 
in the interest of nonproliferation and because the 
material was being stored at a single location. How- 
ever, because it has disclosed that it had six gun-type 
nuclear devices, as well as other relevant informa- 
tion, analysts had to speculate as to how much HEU 
was involved. One estimate, calculated based on the 
amount of enrichment plant feed material, enriched 
product, depleted uranium tails, and separative work, 
concluded that South Africa had 731 (plus or minus 24 
kilograms) of 90 percent enriched uranium, or enough 
material to build 12 Hiroshima-type fission bombs.^ At 
the time, the IAEA was stymied with coming up with 
accurate material balances because, while the South 
African Atomic Energy Corporation "made precise 
measurements of the amount of HEU and LEU, and 
the U-235 assays of each,"^ they paid little attention 
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to the depleted uranium (DU) tails. The tails, which 
were stored as UF6 in more than 600 cylinders, were 
not weighed or assayed accurately because, accord- 
ing to the South African government, they were of 
no economic value. The unaccounted for tails created 
a significant amount of uncertainty in the calculated 
HEU inventory. It is unclear why the AEG did not 
adequately keep track of the DU tails material. Per- 
haps they knew that this would be an important part 
of reconciling the actual throughput and production 
of HEU, should the program ever come to light. Was 
the sloppy record keeping, coupled with the extensive 
document destruction, part of an elaborate ruse to in- 
sert enough uncertainty in the accounting process to 
make it just credible enough to satisfy the IAEA in- 
spectors and the member states? 

After nearly 20 inspection missions, the IAEA al- 
leged that it was able to ascertain that the declared 
inventory was consistent with the declared produc- 
tion and usage data but that the calculated isotopic 
balance indicated "apparent discrepancies" that could 
be "interpreted to indicate that an amount of U-235 
was unaccounted for was actually the lack of an ac- 
curate accounting of the tails. Once the DU tails were 
measured, a process that took several years, inspec- 
tors claimed that the discrepancy was significantly re- 
duced and that the HEU was fully accounted for. But, 
how does one know for sure? The production num- 
bers were never made public. The facility itself had 
already been decommissioned, and the former em- 
ployees clearly had an incentive not to tell the whole 
story: their financial compensation after they were put 
out of a job. 
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Because of the extensive history of the South Afri- 
can program, the IAEA was forced to review produc- 
tion records going back more than 20 years. But, what 
is not clear is whether adequate production records 
had been maintained such that verification of the HEU 
output of the pilot enrichment plant against natural 
uranium inputs, depleted uranium outputs, and in- 
process gas losses were accurately determined. 

THE BASE CASE: WHAT IS KNOWN ABOUT 
SOUTH AFRICA'S PROGRAM BEFORE 
DISARMAMENT 

A number of political factors contributed to the 
decision taken by the South African apartheid govern- 
ment to develop nuclear weapons. Erom a technical 
perspective, it did so because it could. South Africa 
had a large indigenous supply of natural uranium, 
which was readily obtainable as a by-product of gold 
mining and refining. It was also a major supplier of 
uranium to the United States and United Kingdom 
during the first half of the Cold War. South Africa also 
had substantial economic resources and had benefited 
from the U.S. Atoms for Peace program. This included 
U.S.-origin 20 megawatt thermal (MWth) South Africa 
Eundamental Atomic Reactor Installation-1 (SAEA- 
RI-1)^ research and radioisotope production reactor 
and the requisite 93 percent HEU fuel, provided until 
1976. Before the United States imposed sanctions and 
severed ties with South Africa, it also trained South 
African nuclear scientists.® 

Around the time the United States, under its 
Ploughshare Program for peaceful nuclear explosions 
(PNE), and the Soviet Union decided to explore using 
nuclear explosions for large scale engineering proj- 
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ects. South Africa followed suit. Initially, the inten- 
tion was to develop its own PNE research program 
for mining, but it was ultimately transformed into a 
military nuclear weapons program sometime between 
1973 and 1977.^ 

However, the outside assistance it had previously 
received to develop its civilian nuclear program en- 
abled South Africa to develop an indigenous uranium 
enrichment process, and, subsequently, to master all 
aspects of a complete indigenous nuclear fuel cycle. 
It also constructed its own reactor as part of a plan to 
produce plutonium, the SAFARI-2, or Pelinduna reac- 
tor at Pelindaba. The reactor used 606 kilograms (kg) 
of 2 percent enriched uranium and 5.4 metric tons of 
heavy water, both supplied by the United States. The 
project was abandoned in 1969 so that South Africa 
could devote its resources to an indigenous uranium 
enrichment program.^ 

What is known is that South Africa had five key 
facilities associated with its program: Pelindaba,® the 
AEG site that housed the SAFARI-1 research reactor 
(RR), a hot cell complex, a waste disposal site, and 
conversion and fabrication facilities (nuclear weapons 
were built in an isolated section of the site, the Build- 
ing 5000 complex); Pelindaba East (or Valindaba'^), 
which contained the AFC Y-Plant for HEU production 
and the Z-Plant for LEU production; Vastrap,^® which 
contained two nuclear explosive test shafts built in the 
1970s in the Kalahari Desert; the Circle Facilities or 
Advena Central Laboratories, which were ARMSCOR 
facilities used in the 1980s/ ear ly-1990s for design, 
manufacture, and storage of nuclear weapons; and 
Somchem, the military facility involved in the devel- 
opment and manufacture of explosives and propel- 
lants. There was also the site at Gouriqua, in the Cape 
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Province, where South Africa planned to build a reac- 
tor facility for the possible production of plutonium 
and tritium. 

South Africa completed its first gun-type nucle- 
ar weapon in November 1979, and its subsequent 
weapons were built at an average rate of one every 
18 months.^^ Its pilot enrichment plant at Valindaba, 
the Y-Plant, allegedly produced about 100 kilograms 
of HEU per year over the course of its run from 1978 
through 1989. The enrichment process South Africa 
had developed used "an aerodynamic technique simi- 
lar to a stationary wall centrifuge in which uranium 
hexafluoride and hydrogen gas spin inside a small 
stationary tube."^^ By 1989, South Africa had six gun- 
type nuclear devices, each containing 55-kg of HEU, 
which were stored in Kentron Circle, the Advena 
facility. It also had a fully functioning HEU produc- 
tion facility and a semi-commercial LEU production 
facility at Valindaba. (See Figure 8-1.) 
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Source: Adolf von Baekmann, Garry Dillon, and Demetrius 
Perricos, "Nuclear Verification in South Africa," IAEA Bulletin, 
January 1995. 


Figure 8-1, IAEA Timeline of 
South African Nuclear Weapons Program, 
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Whether or not South Africa received any outside 
assistance in the development of its nuclear weap- 
ons program beyond the building blocks provided 
through the Atoms for Peace program is subject to 
some question. President de Klerk claimed that the 
weapons were built without foreign assistance and 
that it never tested those weapons. Some have con- 
tended that South Africa received assistance from Is- 
rael, providing both tritium and other expertise, and 
there is evidence which lends credence to that con- 
tention. For example, a leaked 1988 court judgment 
revealed clandestine imports from Israel of tritium 
useful for boosting nuclear weapon yields.^® The case 
involved a retired South African Air Force pilot who 
had transported some of the materials in question and 
later attempted to blackmail the government. 

Interestingly, author Sasha Polakow-Suransky, a 
native Afrikaner, wrote in 2010 that he was provided 
documents by the ANC government proving that, in 
1975, Israeli officials met with apartheid government 
officials to discuss selling nuclear weapons technolo- 
gies to them, despite international sanctions prohib- 
iting them from doing so. Meeting minutes declassi- 
fied that year revealed that Israel helped South Africa 
"build highly advanced nuclear weapons delivery 
systems, long-range missiles up until 1989, when 
President de Klerk decided to scrap the nuclear weap- 
ons program."^^ It provided the technology upon the 
request of then defense minister P. W. Botha, who had 
asked for "nuclear-capable Jericho missiles." To this 
day, both South Africa and Israel refuse to acknowl- 
edge that the two countries had any relationship in 
which nuclear materials changed hands. 
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HOW THE SOUTH AFRICAN NUCLEAR 
DETERRENT REMAINED A SECRET 
-OR DID IT? 


Although there were many suspicions about the 
existence of a South African nuclear program, the 
government in Pretoria carefully cultivated a policy 
of ambiguity and secrecy that denied the world the 
smoking gun it needed to make a definitive judgment 
about the existence of its nuclear program or its nu- 
clear ambitions. The government in Pretoria created 
sufficient ambiguity and took great pains to keep all 
aspects of its nuclear weapons enterprise secret: "... 
it is alarming how well Pretoria was able to cloak its 
bomb-making project for more than 15 years while 
more than 1,000 people worked on it."^® South Africa's 
methods for concealment are instructive in trying to 
determine the activities in other threshold states. 

In July 1970, then South African Prime Minister B. 
J. Vorster announced in a parliamentary speech that 
the government intended to develop an enrichment 
capability. Vorster stated that the pilot enrichment 
plant was to be built but that the government was not 
prepared to sign the NPT because it wanted to ensure 
secrecy and the proprietary nature of the technology 
and that South Africa expected to be producing 20,000 
MWs of electricity domestically with nuclear power 
by the end of the century. Vorster added that South 
Africa would be enriching uranium domestically be- 
cause of its abundant uranium resources and the de- 
sire to make the uranium economically attractive.^^ 

The technology South Africa employed to enrich 
was indigenously developed by two scientists from 
the Council for Scientific and Industrial Research 
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(CSIR) in Pretoria, and based, in part, on the German 
Becker nozzle method The government then began 
development of its "Reactor Ontwikkeling" (RO) site 
for criticality experiments and PNE assembly at the 
Pelindaba site. As previously noted, the PNE program 
was originally created on the heels of a similar pro- 
gram being conducted in the United States and else- 
where for application in large-scale engineering proj- 
ects. However, South Africa transitioned its PNE to 
develop a limited nuclear deterrent in around 1973-74. 
The RO building was "hidden by a ridge (an example 
of concealment via 'terrain masking') in the valley be- 
hind Pelindaba and was surrounded by up to three 
concentric security perimeters."^® 

At the time, former South African Eoreign Minister 
Pik Botha was reported as having said that: 

It suited us that the West, and the whole outside world 
feared SA production of atomic weapons. We did not 
acknowledge their existence. In my discussions with 
the US over the years, my approach was what would 
we get in return for signing the NPT? Without ever ad- 
mitting the existence of the bombs, I proceeded with 
the line "Let us assume the lady is pregnant. Now 
what can we do for such a lady?^® 

DISARMAMENT AND DISCLOSURE - 
UNRESOLVED QUESTIONS 

In the aftermath of the disclosure of the South Af- 
rican nuclear weapons program, disarmament experts 
and historians sought to reconstruct its precise nature, 
including how much material had been produced and 
how the program was built in extensive secrecy. How- 
ever, research into the nuclear weapons history, even 
20 years later, has been hampered by long-standing 
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secrecy laws, in addition to the destruction of records. 
Further, technical records that survived the apart- 
heid-era destruction have remained secret, including 
those provided to the IAEA, as has the safeguards 
inspection report. 

A battery of secrecy laws was utilized during the 
program's lifetime to conceal the existence of South 
Africa's nuclear arsenal. But, although the need for 
concealment evaporated with de Klerk's decision to 
dismantle the programme, secrecy laws obstructing 
fuller public disclosure have largely persisted into the 
democratic era. . . . officials of two successive African 
National Congress-led governments have expressed 
strong objections to further disclosure beyond those 
made in 1993 - 1994 .® 

Although the South African constitution enshrines 
access to information, and the existence of the Pro- 
motion of Access to Information Act (PAIA) of 2000 
and the establishment in 2002 of an interdepartmental 
Classification and Declassification Review Committee 
aimed at addressing apartheid victims' demands for 
access to records, are all intended to create a basis for 
greater openness, "many documentary requests have 
been rejected or delayed arbitrarily."^^ 

Historians and nuclear experts have said they 
were frustrated by ANC members who once doubted 
apartheid-era officials' accounts of the past and sub- 
sequently showed "little inclination as government 
officials to unearth details and encourage a reexami- 
nation."^ Moreover, as of 2003, some scientists who 
participated in the nuclear program still worked for 
the government, including Karel Fouche, general 
manager of the Pelindaba Nuclear Institute, who di- 
rected "a plant that used to make the HEU necessary 
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for weapons" and was "converted to commercial 
uses." Fouche said he mostly was privy to the science, 
not the strategy, of the weapons program. Informa- 
tion was highly compartmentalized, he said, adding 
that he doesn't believe there is much to tell."^^ But, 
it is the science and access to the nuclear know-how 
that is most critical in determining whether a latent 
nuclear weapons program could be rebuilt. It is also 
worth adding that South Africa continues to have a ci- 
vilian nuclear power program as well as an extensive 
uranium mining infrastructure. 

While some have stated that there is simply no 
need, given current geopolitics, to reconstruct a nucle- 
ar weapons program, history has shown that a change 
in circumstance, along with political will, access to in- 
formation, and the ability to pursue a program under 
the cloak of secrecy, is all that would be required to 
do so. 

In addition, the disclosure of nonsensitive informa- 
tion by current and former nuclear weapons program 
employees is also prohibited by secrecy laws. Nuclear 
Energy Act 46 of 1999 prohibits the disclosure of any 
information about AEC activities with respect to "re- 
stricted matter." Nuclear program personnel were 
also required to sign an oath pledging to comply with 
nondisclosure laws during and after their employ- 
ment. Former AEC head Waldo Stumpf negotiated a 
nondisclosure agreement with the ANC government 
that binds him to perpetual secrecy as part of a finan- 
cial settlement upon his departure. 
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The U.S, Government Questions 
South Africa's Disclosure. 

In addition to the IAEA inspectors' suspicions 
prior to the 1993 disclosure, debate over the complete- 
ness of the South African government's inventory 
disclosures to the IAEA were actively debated within 
the U.S. Government. A December 19, 1993, document 
produced by the intelligence community stated that 
"South Africa went to considerable lengths not to ac- 
knowledge to either the IAEA or the public the mili- 
tary orientation and advanced stage of the former pro- 
gram. . The intelligence bureau analysts at the U.S. 
Department of State took issue with the assertions by 
the Central Intelligence Agency (CIA) that questioned 
the completeness of the South African material decla- 
ration regarding the amount of HEU it had produced. 
State asserted that, despite the CIA's conclusions, the 
South Africans "reportedly kept poor operating re- 
cords of enriched uranium output" so making a firm 
conclusion of cheating was not possible at that time.^^ 
In a second memo to the Nonproliferation Center, 
State noted that it strongly believed that: 

the collective body of information is ambiguous, and 
contradictions must be resolved before any firm judg- 
ments can be offered with confidence. Some informa- 
tion tends to support the notion of an "honest declara- 
tion"; some tends to support the "cheating" scenario; 
and much is open to both interpretations. There is no 
basis at present for assigning greater likelihood to the 
"cheating" scenario. More importantly, we feel it is 
premature to offer any general verdict at present on 
South Africa's conduct.^*’ 
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IAEA INSPECTIONS -MORE QUESTIONS 
THAN ANSWERS 


When President de Klerk announced that South 
Africa had indeed developed a limited nuclear deter- 
rent, the IAEA had a team of inspectors on the ground. 
According to a report by Adolf von Baeckmann, Gar- 
ry Dillon, and Demetri Perricos, this led the IAEA to 
"augment its safeguards team in South Africa with, 
among other specialists, nuclear weapons experts." 
The team "thoroughly examined detailed records of 
nuclear materials in South Africa" and was able to 
conclude that "there were no indications to suggest 
that the initial inventory was incomplete or that the 
South African nuclear weapons programme had not 
been completely terminated and dismantled."^^ 

However, it was later revealed that the inspection 
team had difficulty in coming to these conclusions, 
partly because the South African program had a num- 
ber of indigenous facilities that had not previously 
been subject to safeguards. Moreover, South Africa 
refused to make public the amount of HEU it had pro- 
duced due to alleged concerns about proliferation. Fi- 
nally, the team found that the calculated isotopic bal- 
ance indicated discrepancies with respect to the HEU 
produced by the Y-Plant and the LEU produced by the 
Z-Plant. The team concluded that there could be some 
U-235 that was unaccounted for. Further complicat- 
ing matters was the absence of accurate accountancy 
of the depleted uranium waste stream. They had to 
resort to records regarding the recovery of HEU fol- 
lowing shutdown of the enrichment facility. Since the 
facilities had been dismantled before the IAEA team 
was able to conduct inspections, they were completely 
reliant upon whatever records were made available to 
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them as well as re-creation of plant operation. This 
meant they had to be authentic in order to be credible. 
Was the team able to authenticate those records? As 
many of those involved in the weapons program had 
also signed nondisclosure agreements in order to get 
their full government retirement compensation, how 
much did they tell the IAEA inspectors? Were they 
fearful that they would lose their compensation if 
they said too much? Even the former head of the AEC 
admitted that: 

Verification by the IAEA of the completeness of South 
Africa's declaration of inventory of nuclear material 
and facilities was 'no easy task' and that the inspection 
team would be 'forced to delve into the past. . .'.^® 

MATERIAL BALANCES AND MUF 

When the IAEA began its inventory inspections at 
the declared South African facilities in 1991 following 
its accession to the NET, the inspection team found a 
number of decommissioned and partially or wholly 
dismantled facilities, including those that had pro- 
duced HEU and LEU, because President de Klerk had 
ordered their dismantlement 2 years earlier. Much of 
the verification therefore rested on the documentation, 
records, and interviews that the South African govern- 
ment was able to furnish. At the time, the team con- 
cluded that the information provided by the govern- 
ment— the operating records of the decommissioned 
pilot enrichment plant— were insufficient to make any 
firm conclusions about the validity of the declaration. 
It requested additional information, including the 
historical values of material unaccounted for (MUE), 
as determined by the AEC for "financial control," the 
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historical flows of nuclear material, including import- 
ed material, and accountancy and operating records 
of the semi-commercial enrichment plant. The South 
African government did provide those documents, 
which indicated that production of enriched uranium 
was suspended between August 1979 and July 1981 
due to technical problems. The AEC claimed that 
production fluctuated depending on the operational 
situation at the plant, withdrawal of LEU for produc- 
tion of Koeberg fuel elements, introduction of DU feed 
material, etc.^® 

However, when the team calculated the U-235 
balance in the pilot enrichment plant, it found a dis- 
crepancy it attributed to the fact that the AEC lacked 
a "formal measurement control program" for the de- 
pleted uranium product, which accounted for a signif- 
icant amount of the U-235 balance. The AEC claimed 
at the time that they did not measure the DU formally 
because the plant management placed a "low finan- 
cial value" on it. The team found a similar problem 
when trying to reconcile the material balances at the 
semi-commercial enrichment plant; that is, the team 
once again came up with a discrepancy in the U-235 
balance. Again, the team ascribed it to the material 
accounting system. Upon further investigation, the 
IAEA inspection team determined that the: 

accuracy of the physical inventory was impaired by 
the non-availability of suitable instruments to mea- 
sure process hold-ups, the unwillingness of the plant 
management to interrupt production in order to drain 
condensers or to transfer material to measurement 
points, and to the lack of comprehensive measurement 
control programmes. The calculated values of [MUF] 
for each year of operation were provided to the team 
by the AEC, but were not taken into account in the 
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evaluation of the U-235 balances in view of the uncer- 
tainties associated with their determination.^^ 

As a result, the team did not do a complete mass bal- 
ance of the material at the enrichment sites. 

Following the disclosure of the nuclear weapons 
program in 1993, the IAEA set about trying to recon- 
cile the apparent discrepancies it discovered during 
pre-disclosure inspections. It received access to ad- 
ditional records and technical reports from the AEC, 
including the description of "phenomena, such as 
chemical losses, which were unique to the process gas 
mixture and the plan construction materials which 
influenced the output of the plant."^^ Given further 
"clarifications" provided by AEC officials and ex- 
amination of additional historical records, the IAEA 
team concluded that the "magnitude of the apparent 
discrepancy in the U-235 balance associated with the 
pilot enrichment plant was reduced to such a level" 
that it could conclude that there was simply reason- 
able in-process losses.®^ 

Having regard to the uncertainties normally associat- 
ed with data of this nature, it is reasonable to conclude 
that the uranium-235 balance of the high enriched ura- 
nium, low enriched uranium and depleted uranium 
produced by the pilot enrichment plant is consistent 
with the uranium feed.^® 

What is puzzling about this statement is that the 
team made this assertion despite the fact that it was 
unable to conduct a complete mass balance calcula- 
tion because the AEC did not assay or weigh the tails 
and other material it deemed "waste," including some 
material that contained significant amounts of HEU. 
The team was also unable to obtain records with re- 
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spect to the amounts of natural and depleted uranium 
used in experimental or the material transferred to the 
nuclear weapons program "on the grounds that natu- 
ral and depleted uranium had been considered ordi- 
nary metal with little nuclear significant or financial 
value. 

When IAEA Safeguards Department management 
raised questions about the lack of a mass balance, 
the South Africans were forced to assay and weigh 
the amount of material in the roughly 600 cylinders 
deemed waste. In so doing, they discovered a lot more 
HEU than had originally been determined by the in- 
spection team. But, did it account for all of the HEU in 
the tails material? And what about the holdup mate- 
rial the team was unable to access? 

An October 1993 reporE^ estimated that the South 
African government had roughly 731-kg (plus or 
minus 24-kg) of 90 percent uranium on hand at the 
time of the disclosure. This was an inventory differ- 
ence equivalent to the material required to make two 
bombs. The South African estimate of the amount of 
depleted uranium tails from enrichment plant opera- 
tions was 370,643-kg. Taking into account the amount 
of material needed to start up the pilot enrichment 
plant and bring it to equilibrium, and the amount of 
fuel it produced for the SAEARI-1 research reactor 
and the Koeberg reactors, including how much each 
required given their respective designs, the report 
estimated that, had the pilot enrichment plant pro- 
duced only HEU for weapons, it could have produced 
roughly 1000-kg of 90 percent uranium. 

The South African AEC estimated [sic] of the relative 

uncertainty (one standard deviation) in the tails assay 

is 15.6 percent. This, already large error in the tails 
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assay, produced a corresponding relative uncertainty 
in the calculated inventory of HEU product that is 
about twice as large — about 35 percent.^® 


Moreover, the gun assembly device dropped on 
Hiroshima — Little Boy— was built using about 50-kg 
of HEU enriched to 80 percent and had a yield estimat- 
ed between 12 and 15 kiloton (kt). The yield range of 
the South African weapons was estimated to be about 
10- to 18-kt. It was unknown, however, how effective 
the neutron reflector was in those weapons compared 
with the one in Little Boy. Therefore, the South Afri- 
can weapons could have needed as much as 60-kg of 
90 percent enriched uranium per warhead. Based on 
what was known about production at the pilot enrich- 
ment plant, it was capable of producing enough HEU 
for an additional five weapons of the same design. The 
inventory difference, or MUF, represents another two 
nuclear weapons' worth, which could have been in 
the tails material or elsewhere. 

LESSONS LEARNED, OPEN QUESTIONS, AND 
WHY THEY MATTER NOW 

It has been 20 years since South Africa disclosed 
that it had built a limited nuclear deterrent and then 
dismantled it. But, despite the many writings on the 
subject, significant gaps in public knowledge remain. 
How thorough was the IAEA in reconciling HEU pro- 
duction? Why did the de Klerk government destroy 
many of the "smoking guns" from the program before 
the IAEA could get to them? How successful was the 
IAEA team in reconciling historical fissile materials 
production even though the physical plant no longer 
existed? Much of the secrecy the South African gov- 
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eminent instituted in the wake of the dismantlement 
is still in place, despite the fact that the program has 
allegedly not existed for 20 years. 

The South African disclosure has been held up as 
a beacon of transparency and of rollback of a nuclear 
weapons program. But, in the context of the current 
administration's commitment to eliminating nuclear 
weapons, the South African case raises at least as 
many questions as the IAEA has purported to have 
answered about the program. Questions about the 
amount of fissile material the South African complex 
actually produced, the remaining secrecy surrounding 
the program, the destruction of documentation and 
facilities prior to the disclosure and IAEA inspections 
of the weapons facilities, and the completeness of the 
IAEA's verification of the South African program all 
beg the question of how a country would give up a 
nuclear weapons program now, how it could be ef- 
fectively verified, and how much confidence the 
public — and other governments— would have in that 
verification. The confidence level would have to be 
particularly high in order for any other country to fol- 
low suit and similarly disarm. It would also have to be 
high in order to convince non-nuclear weapons states 
that the threat has been eliminated. If the standard ac- 
corded to South Africa by the IAEA and its Member 
States back in 1993 were used in the context of the cur- 
rent "getting to zero" campaign, it is unclear that the 
book would be deemed to have been verifiably closed. 
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CHAPTER 9 


VERIFYING THE DISMANTLEMENT 
OF SOUTH AFRICA’S NUCLEAR 
WEAPONS PROGRAM 

Olli Heinonen 


INTRODUCTION 

In its 2011 annual Safeguards Statement, the Inter- 
national Atomic Energy Agency (IAEA) determined 
that for 58 states where both the Comprehensive Safe- 
guards Agreement (CSA) and Additional Protocol 
(AP) are in force, it: 

found no indication of the diversion of declared nu- 
clear material from peaceful nuclear activities and no 
indication of undeclared nuclear material or activi- 
ties. On this basis, the Secretariat concluded that, for 
these States, all nuclear material remained in peaceful 
activities.' 

This rolling safeguards report that provided a year- 
ly review of the status of IAEA member states' nuclear 
activities was noteworthy as South Africa was, for the 
first time, included in the group of states.^ 

In September 1991, South Africa concluded a CSA 
with the IAEA and submitted its initial declaration on 
facilities and nuclear material inventories (a summary 
of South Africa's nuclear program prior to its conclu- 
sion of a safeguards agreement is included in Appen- 
dix 9-1). The same year, the IAEA General Conference 
requested that the IAEA Director General "verify the 
completeness of the inventory of South Africa's nu- 
clear installations and material and to report to the 
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Board of Governors and to the General Conference."^ 
This request was made following the entry into force 
of South Africa's safeguards and previous long-stand- 
ing claims made regarding the existence of a possible 
nuclear weapons program. 

While the South African government in Pretoria 
had already taken the political decision and had dis- 
mantled its nuclear weapons program prior to signing 
a safeguards agreement with the IAEA, it was only in 
March 1993 that President F. W. de Klerk disclosed 
South Africa's nuclear weapons program. South Af- 
rica's initial nuclear material inventory submitted to 
the IAEA in 1991 had not contained any reference to 
its past nuclear weapons program. The IAEA Secre- 
tariat's first verification report submitted to the Gen- 
eral Conference in September 1992'* did not mention 
any indications of a weapons program either, though 
it concluded that there were "apparent discrepancies" 
in calculated U-235 isotope balances at the pilot enrich- 
ment plant and semi-commercial enrichment plant. 

Following Pretoria's disclosure, the IAEA's veri- 
fication work was extended from 1993 to confirm 
dismantlement and to put in place mechanisms that 
would allow for early detection should the weapons 
program be reconstituted. Parallel to this, inspectors 
initiated a more extensive examination of nuclear ma- 
terial flows and verification of the historical produc- 
tion of low and highly enriched uranium. By the time 
of the next verification report in September 1993, the 
Secretariat was able to conclude, by tallying up pri- 
or unreported amounts of highly enriched uranium 
(HEU) that were used for the weapons program, that 
the amount of HEU that could have been produced 
by the pilot enrichment plant was consistent with the 
amount declared in the initial report.^ However, at 
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that stage, work for the verification of the complete- 
ness of low enriched uranium production continued. 

VERIFICATION CHALLENGES 

While South Africa's initial declaration to the IAEA 
was meant to include all information on all nuclear 
material subject to safeguards, the weapons-related 
aspects of the South African program were omitted 
from its initial report. The IAEA was provided with 
historical accounting and operating records of enrich- 
ment plants and other facilities, but records provided 
to inspectors did not include any reference, inter alia, 
to conversion of highly enriched uranium hexafluo- 
ride to uranium metal and further to weapon com- 
ponents. Similarly, its initial report did not mention 
the existence of such facilities. It is worth mentioning 
that the IAEA's annual safeguards statements for 1992 
only mentioned that the verification of South Africa's 
initial declaration was proceeding without any refer- 
ence to possible concerns about the completeness of 
declarations. 

Events took a clear turn with regard to the IAEA's 
verification activities following South Africa's disclo- 
sure. Objectives to inspections took on added dimen- 
sions. Assurances were sought that: 

1. all nuclear material in South Africa had been 
placed under IAEA safeguards and is in peaceful use, 

2. all nuclear weapons, their components, and re- 
lated manufacturing equipment had been destroyed, 

3. all nuclear weapons-related installations had 
been fully decommissioned or converted exclusively 
to peaceful nuclear use, and 

4. mechanisms that allowed for early detection of 
restoration of any nuclear weapons capability were 
put in place. 
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The first benchmark for the IAEA in terms of nu- 
clear material accountancy undertaken was to tally up 
enriched uranium stocks and ensure that no signifi- 
cant quantity of highly enriched uranium was missing 
from the declared inventories (the absence of nuclear 
material for one or more nuclear weapons could have 
been concealed, e.g., by overstating nuclear material 
inventories or MUFs). 

In equation form; 

MUF= BI + X-Y +HU + BE 

Where, 

BI= Beginning physical inventory 
X= Inventory increases, then 
Y= Inventory decreases 
HU = Holdup 

BE = Ending inventory unaccounted for 

By the time the IAEA was called upon to verify 
South Africa's dismantled nuclear weapons program, 
the agency was already in the midst of strengthening 
its safeguards verification process. New winds start- 
ed to blow in the early-1990s after the discovery and 
dismantlement of an undeclared nuclear program in 
Iraq, where it soon became obvious that an enhance- 
ment of the effectiveness of the IAEA safeguards sys- 
tem was needed. As a result, a number of safeguards 
measures were strengthened, including those that 
were being applied to safeguards undertaken in both 
North Korea and South Africa. The enhanced evalua- 
tion process brought together not only declared data 
and verification results through a statistical analysis 
based on the propagation of the operators and inspec- 
tors measurement errors in order to detect diversion 
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of declared material into material imbalance, but ways 
were also sought to more closely corroborate data and 
trends, such as cumulative MUFs, performance of the 
operators' nuclear material accountancy system, and 
operator/ inspector measurement differences. 

Another new development being implemented in 
the South African case was the re-examination of veri- 
fication processes involving nuclear materials. Non- 
nuclear production parameters were also evaluated 
alongside the overall consistency of nuclear material 
accountancy records. To cite an example, uranium 
metal quantities must be consistent with parameters 
to produce uranium metal. In such a process, uranium 
tetra fluoride (UF4) is reduced to uranium metal using 
customarily calcium on magnesium metals. The pro- 
cess produces ashes and slag, which contain calcium 
or magnesium. The amounts of these elements found 
in wastes should be in conformity with the uranium 
metal produced. Furthermore, the amounts of ashes 
and slag need to match with the stated amounts of 
uranium metal produced. Similarly, one can estimate 
losses in casting and machining of uranium metal 
components to their final forms. Again, those need 
to match up with the amount of uranium metal pro- 
duced. Evaluation of the choke points, for example for 
a production chain, yellowcake — U02 — UF4 — UF6 — 
enrichment— UF4 — uranium metal, provides addi- 
tional assurances about the completeness of a state's 
declarations. 

While the enhancement of safeguards measures 
was still evolving and in its early days. South Africa's 
declaration that it had given up its nuclear weapons 
and would open its nuclear program to safeguards 
provided inspectors the learning process and experi- 
ence that helped shaped a more analytical safeguards 
process. 
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The South African case had essentially two di- 
mensions under which verfication activities fell: dis- 
mantlement and assurances. These processes, while 
not the same, were also not exclusive and overlapped. 
In fact, one could not be achieved fully without the 
other. Assurances that all (present and future) nuclear 
activities would remain in peaceful use meant recon- 
structing and understanding the historical aspects of 
the weapons program. In South Africa's case, even 
with the case of admission of a weapons program and 
subjecting its program to IAEA dismantlement, there 
were gaps of ambiguity that the agency faced. While 
it is unlikely to ever achieve a 100 percent score, the 
IAEA's role was to provide the necessary assurances 
required to both dismantle and prevent reconstitution 
of the weapons program. 

Prior to disclosure. South Africa had destroyed 
documents related to the design and manufactur- 
ing of nuclear weapons. However, at the same time, 
thousands of operating records, including historical 
accounting and operating records of its two enrich- 
ment plants and uranium conversion and fabrication 
plants, were available to the IAEA. Such papers were, 
however, far from sufficient in themselves to detail a 
full picture. For instance, some of the wastes, scrap, 
and tails were poorly characterized in terms of their 
nuclear material quantities. The enrichment plant 
used to produce highly enriched uranium mainly for 
the weapons program had already been dismantled, 
while the other was still kept operational until 1995. 
From a technical perspective, the challenge was to es- 
timate uranium holdup in equipment. Precise verifica- 
tion of nuclear material held in equipment was only 
possible from equipment decontamination liquors or 
sludges, which was time consuming and stretched 
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over many years. Until then, the starting point of the 
holdups had to be based on estimates. 

As a result, the first material balances tallied by the 
IAEA after 1991 resulted in an apparent discrepancy 
in the U-235 balances of the two enrichment plants. 
With respect to HEU produced by the pilot enrichment 
plant and LEU produced by the semi-commercial en- 
richment plant, it showed a substantial amount of un- 
accounted for uranium-235. After the first evaluations 
in 1992, the IAEA continued with the re-examination 
of records, additional decontamination activities, and 
further sampling to obtain more precise estimates of 
nuclear material in wastes, tails, and holdups. 

Another difficulty in confirming the statements 
made by South Africa was the fact that some of the 
installations that were used for its nuclear weapons 
produced nuclear material for both its civilian and 
military parts of the nuclear program. As a result, 
for example, wastes were mixed, hence complicating 
verification assessment. This technical matter alone, 
which has an impact on the wider picture of deter- 
mining South Africa's nuclear program, resulted in 
additional and further verification steps. The disman- 
tling, decontamination, and re-characterization of the 
wastes extended well over a decade. 

The nuclear waste storage facility held tens of 
thousands of drums containing substantial amounts 
of high and low enriched uranium waste from the 
former enrichment plants and other decommissioned 
facilities (see Figure 9-1). 
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Figure 9-2. All Waste Drums Opened, Contents 
Characterized, and Nuclear Material Verified.* 
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Figure 9-1. Temporary Storage of Waste Drums in a 
Decommissioned Enrichment Plant.^ 


During the re-characterization process, the con- 
tents of each drum were recorded after opening it, and 
nuclear material quantity was verified using special 
drum scanners (see Figures 9-2 and 9-3). 



Figure 9-3, IQ 3 Scanner Used for Verification 
of Uranium in Waste Drums.’ 

LONG-TERM MONITORING 

After deciding to terminate its nuclear weapons 
program in 1989, South Africa proceeded with dis- 
mantling its weapons and related infrastructure, in- 
cluding the destruction of weapons-related documen- 
tation without the presence of the IAEA. 

To confirm the statements made by the South Afri- 
can authorities and to set up a baseline to monitor that 
the program or its parts were not reconstituted, the 
IAEA had extensive discussions and briefings by for- 
mer staff personnel to understand the country's nucle- 
ar program from a "cradle to grave" approach. Such 
information received was reconciled with other infor- 
mation received by IAEA from other member states; 
compared against dismantlement records kept by the 
South African authorities; and cross-checked against 
independent IAEA nuclear material verification re- 
sults, facility designs, and environmental samples tak- 


171 


en. These steps were undertaken to create an indepen- 
dent understanding of the chronology and contours of 
South Africa's nuclear program. Apart from the IAEA 
using its tools available to draw its own conclusions, 
the verification process was also a dynamic process of 
dialogue with South African authorities that defined 
what assurances were further required along the way. 
For example, the IAEA made additional suggestions 
to Pretoria to destroy additional equipment and to 
render the test shafts in Kalahari useless. 

Due to the embargos imposed under apartheid 
rule and the secrecy that necessitated the development 
of its nuclear weapons program. South Africa estab- 
lished an extensive indigenous industrial infrastruc- 
ture to support its civilian and weapons programs. 
This infrastructure produced, inter alia, equipment 
and components needed for its enrichment program. 
This created a different problem: While the IAEA was 
monitoring nuclear installations and materials under 
the safeguards agreement and verifying dismantle- 
ment, some of the South African companies involved 
in nuclear weapons-related matters became engaged 
with the illicit nuclear trade. For instance, one of the 
companies had built Libya's uranium hexafluoride 
feeding system and was only busted in 2003 when the 
A. Q. Khan clandestine nuclear network was unrav- 
eled. While it is known that part of the process of dis- 
mantlement also included rehabilitation of personnel 
involved in nuclear weapons work, the clandestine 
and indigenous nature by which states like South Af- 
rica operated have meant that some of the companies 
managed to slip the attention of the IAEA and also, 
apparently, that of the South African authorities. 
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CONCLUSION 


There are a few lessons to be drawn from the 
IAEA's role in verifying South Africa's dismantled 
nuclear weapons program. Long-term monitoring 
and verification of nonproliferation efforts are nec- 
essary and require a significant period of time, even 
with self-disclosure of nuclear weapons, as seen in 
South Africa's case. The fact that secret nuclear pro- 
grams, like South Africa's, often develop their own 
indigenous processes throws light on the need for 
monitoring all such nuclear-related facilities. Atten- 
tion should also be given to understanding the extent 
of indigenous production capabilities and their poten- 
tial links to nuclear proliferation. 

Verification work is painstaking as well as time and 
resource consuming. Inspectors are faced with ambi- 
guities, inconsistencies, and gaps. A historical and 
composite understanding of the nature and dimen- 
sions of a nuclear program, including the military/ 
weapons dimensions, is needed to ultimately provide 
the assurances of a peaceful nuclear program. Because 
the IAEA needs to draw its own conclusions and cor- 
roborate information it is provided by the inspected 
state, details and (re)examining issues from various 
perspectives are required. This is not a case of nitpick- 
ing but a step within the larger verifications process in 
order to derive the correctness and completeness of a 
program that had developed in a clandestine nature. 

The IAEA has the necessary tools and practices to 
verify nuclear inventories, map the chronologies of a 
nuclear program, and suggest additional steps needed 
to be taken by the inspected state to help the IAEA ful- 
fill its requirements. Each case of nuclear concern and 
complexity is different, and prescriptions may differ 
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but have the same aim of ultimately providing the 
international community the needed assurance of a 
peaceful nuclear program. In the case of South Africa, 
much of the weapons-related information had been 
destroyed, and weapons and their manufacturing in- 
stallations had been dismantled without the presence 
of the IAEA inspectors. While there can be a number 
of conjectures as to why South Africa chose to do so, it 
is clear that the process of verification after the fact of 
dismantlement having taken place meant time added 
to the clock for the IAEA in terms of providing assur- 
ances on the completeness and correctness of South 
Africa's nuclear program. 

Since only limited verification was possible during 
the operation of the nuclear facilities, and parts of the 
program were dismantled without the presence of the 
IAEA, any final assessment would have to be recon- 
ciled with the fact that an absolute account of every 
single event is unlikely. However, through the re- 
finement of the material balance evaluations process, 
coupled with verified information that became avail- 
able from decontamination activities carried out and 
the recharacterization of wastes, the IAEA was able to 
state, after a period of time, that there is no reason to 
indicate that the nuclear material inventory of South 
Africa is incomplete. 

Aside from the IAEA's verification requirements, 
full cooperation and transparency from the authori- 
ties and operators of the inspected state are equally es- 
sential in resolving outstanding issues. South Africa's 
policy — access any time, any place with a reason — 
was important for the IAEA work. Its authorities also 
cooperated with and provided access to people who 
were working in its weapons program during the 
various phases. Ongoing inspections and verification 
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work conducted, along with the accommodation and 
cordial cooperation provided by the South African 
government to the IAEA, were ingredients that even- 
tually put the country back on the path to attaining its 
full bill-of-health assessment in 2010. 
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APPENDIX 9-] 


In the 1970s and 1980s, South Africa's nuclear pro- 
gram focused first on the manufacture of a gun-type 
device, and subsequently pursued research and devel- 
opment (R&D) for an implosion-type nuclear device. 
In the 1970s, Pretoria's Atomic Energy Commission's 
nuclear weapons-related work was concentrated at 
Pelindaba (Building 5000), where criticality experi- 
ments were conducted to develop a gun-type nuclear 
device.^ The area had also housed R&D laboratories, 
as well as premises for the machining of uranium met- 
al components for a first nuclear device, which was 
completed by 1979.^ 

When the decision to develop deliverable nuclear 
weapons was made later in the 1970s,^ the Kentron 
Circle Facility (Advena Circle Facility or Advena 
Central Laboratories) was built for the production of 
South Africa's second nuclear device, followed by the 
construction of four other gun-type weapons. Physi- 
cally, the Kentron Circle Facility was located in an 
entirely separate geographical area a few kilometers 
away from Pelindaba. Services of Somchem, an ARM- 
SCOR weapons-dedicated facility, were also used for 
the development of explosives for nuclear purposes. 
This phase of the nuclear weapons R&D program 
included studies on possible use of tritium boosted 
devices, research on implosion, and thermonuclear 
technology, and the production and recovery of 
plutonium and tritium.^ 

South Africa also built testing areas for its nuclear 
weapons program. The Vastrap test range was located 
in the Kalahari Desert and had two nuclear test shafts.® 
The test shafts had a depth of 385 and 216 meters, re- 
spectively.® The shafts were sealed off in 1993 under 
IAEA supervision. 
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Highly enriched uranium was a natural choice for 
Pretoria's weapons program given its rich uranium 
ore resources. In 2011, South Africa retained 5 percent 
of the world's known recoverable uranium resources.’ 
By 1952, South Africa had started producing uranium. 
At the peak of its mining program, until 1965, South 
Africa operated 26 mines, but since then, mining has 
decreased. In 2012, South Africa produced 465 tons of 
uranium, which is less than 1 percent of world pro- 
duction. 

Today, South Africa maintains one operating ura- 
nium recovery plant, the Vaal River South uranium 
plant,® compared to the early-1980s when it operated 
three uranium production plants. 

FACILITIES UNDER SAFEGUARDS BEFORE 
SEPTEMBER 1991 

Before 1991, and the conclusion of a comprehen- 
sive safeguards agreement with the IAEA, there were 
three installations under IAEA Information Circular 
66 safeguards agreement in South Africa. 

Research Reactor. 

In 1965, South Africa Fundamental Atomic Reactor 
Installation (SAFARI-1), a 20-megawatt (MW) light 
water reactor, started operation in Pelindaba. The 
reactor had an original supply of 90 percent highly 
enriched uranium (HEU) fuel from the United States 
until 1976. 
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Hot Cell Complex, Pelindaba. 

The Hot Cell Complex facility at Pelindaba has 
been used for isotope production purposes. South Af- 
rica is today one of the main molybdenum-99 produc- 
ers. In 1984, South Africa made a policy decision— due 
to risks that the IAEA may find clandestine opera- 
tions— that the installation would not be used for the 
R&D on plutonium reprocessing. For the same reason, 
the SAFARI-1 reactor was not used for any plutonium 
production experiments. 

Koeberg Nuclear Power Plant. 

The Koeberg Plant, commissioned in 1984-85, 
was designed and built by Framatome, France. It has 
twin 900-megawatt electrical class pressurized water 
reactors. 

ADDITIONAL NUCLEAR INSTALLATIONS 
DECLARED IN SEPTEMBER 1991 

The initial declaration included a number of nu- 
clear facilities, laboratories, and small locations using 
nuclear material. South Africa also had uranium en- 
richment studies using gas centrifuges and working 
with laser enrichment. The major installations related 
to uranium enrichment, uranium processing, and nu- 
clear material storage and recovery are as follows. 

Uranium Conversion. 

In the 1960s, South Africa started small-scale ura- 
nium conversion experiments. A uranium conversion 
facility was built in the early-1980s to produce feed 
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material for uranium enrichment. At some point, 
South Africa also constructed, and operated, a second 
UF6 production plant. It was shut down by 1998. 

Pilot Uranium Enrichment Plant, Y-Plant. 

Production of HEU (this facility also produced low 
enriched uranium [LEU]) began in January 1978 and 
ended in November 1989 at Valindaba, adjacent to the 
Pelindaba site. The United States stopped exporting 
HEU fuel for the SAFARI-1 reactor in protest against 
the construction of Y-Plant and South Africa's nuclear 
weapons program. The Y-Plant then started produc- 
ing 45 percent enriched uranium in 1979 for SAFARI-1. 
The plant was already under decommissioning when 
Pretoria provided its initial declaration to the IAEA. 

Semi-Commercial Enrichment Plant, Z-Plant. 

Production of low enriched material began in Au- 
gust 1988 at Valindaba. The plant was still in operation 
when Pretoria submitted its initial state declaration in 
1991. Enrichment activities at the plant were terminat- 
ed in October 1995. Prior to shutdown, the Z-plant had 
a capacity of 300,000 separative work unit (SWU)/yr. 
It supplied 3.25 percent enriched uranium for the Koe- 
berg Plant. Originally, fuel for Koeberg was imported. 
During the height of sanctions. South Africa's AEC 
was tasked to set up and operate uranium conversion, 
enrichment, and fuel manufacturing services to keep 
the Koeberg reactors in operation. (See Figure 9-AI-l.) 
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Figure 9-AI-l. View of the Enrichment Plant before 
Dismantlement.® 

Highly Enriched Uranium Fuel Fabrication. 

The pilot scale plant was built to produce fuel el- 
ements for the SAFARI-1 research reactor after the 
United States stopped the fuel deliveries in 1976. 

LEU Fuel Fabrication Plant. 

The fuel fabrication plant produced LEU fuel ele- 
ments for the Koeberg power reactors. 

There was also a zircaloy tubing facility in Pelind- 
aba to produce cladding for fuel assemblies used in 
Koeberg reactors. In 1993, it was closed and sold to a 
Chinese enterprise. 
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Decontamination Plants and Waste Storages, 

These plants are at Pelindaba and are used for de- 
contamination of equipment, storing of wastes, and 
packing wastes for the final disposal. 

Spent Fuel and Waste Disposal. 

South Africa has two radioactive waste disposal 
sites: the Thabana Hill site and the Vaalputs National 
Waste Repository. 
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